Secrets

Get a Secret

passbox get <name> [options]

Retrieves and decrypts a secret value.

Options

Option	Description
--vault <name>	Vault name or ID
--env <name>	Environment name (e.g., staging, production)

Examples

passbox get DATABASE_URL
passbox get API_KEY --vault my-app --env production

Set a Secret

passbox set <name> <value> [options]

Creates or updates a secret. The value is encrypted client-side before transmission.

Options

Option	Description
--vault <name>	Vault name or ID
--env <name>	Environment name
--description <text>	Optional description

Examples

passbox set DATABASE_URL "postgres://user:pass@host/db"
passbox set API_KEY "sk-abc123" --env production --description "OpenAI API key"

Tip

If the secret already exists, it’s updated and a new version is created automatically.

Delete a Secret

passbox delete <name> [options]

Permanently deletes a secret. Requires admin or owner role.

Options

Option	Description
--vault <name>	Vault name or ID
--env <name>	Environment name

Example

passbox delete OLD_API_KEY --vault my-app

List Secrets

passbox list [options]

Lists all secret names in a vault (values are not shown).

Options

Option	Description
--vault <name>	Vault name or ID
--env <name>	Environment name

Example

passbox list --vault my-app --env production
# DATABASE_URL    v3   2024-01-15
# API_KEY         v1   2024-01-10
# REDIS_URL       v2   2024-01-12

View Secret History

passbox history <name> [options]

Shows the version history of a secret, including when each version was created.

Options

Option	Description
--vault <name>	Vault name or ID
--env <name>	Environment name

Example

passbox history DATABASE_URL --vault my-app
# Version 3  2024-01-15T10:30:00Z
# Version 2  2024-01-10T08:15:00Z
# Version 1  2024-01-05T14:00:00Z