Platform security
Protect stored provider credentials
Use a separate encryption key before storing real provider credentials in the workspace.
Do this in your cloud deploymentReady
Stored client credentials use a separate encryption key.
Next steps
- 01Create a separate random value in the hosting provider's secret manager.
- 02Set CREDENTIALS_KEY for the Founderled deployment.
- 03Redeploy and connect a provider only after the status is ready.
What proves it is done
Founderled reports presence only. The key and decrypted credentials never appear in the UI.
Founderled cannot safely rewrite its own boot secrets from a public page. The cloud or provider owns that action; this page tells you exactly what to configure and gives you the re-check when you return.