# Confused between the "credentials" in APP/settings versus APP/credentials

**URL:** <https://discourse.nodered.org/t/confused-between-the-credentials-in-app-settings-versus-app-credentials/24945>\
**Category:** General\
**Created:** [16 April 2020 13:51 UTC](https://discourse.nodered.org/t/confused-between-the-credentials-in-app-settings-versus-app-credentials/24945 "2020-04-16T13:51:27Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![etawyy](https://avatars.discourse-cdn.com/v4/letter/e/7bcc69/32.png) [@etawyy](https://discourse.nodered.org/u/etawyy)\
**Post date:** [16 April 2020 13:51 UTC](https://discourse.nodered.org/t/confused-between-the-credentials-in-app-settings-versus-app-credentials/24945/1 "2020-04-16T13:51:27Z")

</div>

I'm running nodered in bluemix and am putting that system in production.  
In my cloudant storage (the "nodered" db) I see 2 credentials:  
in APPNAME/credential: {"credentials":{"$":"XXXXX"}}  
in APPNAME/settings: { "settings":{"\_credentialSecret":"AAAAAA" }

I I understood correctly, these credentials are for authenticating the user accessing the UI.

What is the difference between these 2 values?

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [16 April 2020 17:15 UTC](https://discourse.nodered.org/t/confused-between-the-credentials-in-app-settings-versus-app-credentials/24945/2 "2020-04-16T17:15:33Z")

</div>

`APPNAME/credential` contains any node credentials configured in your flow.

`APPNAME/settings` is the runtime settings document. That includes `_credentialSecret` which is the automatically generated key used to encrypt the credentials stored in `APPNAME/credential`.

Neither of them are related to securing access to the UI.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [15 June 2020 17:24 UTC](https://discourse.nodered.org/t/confused-between-the-credentials-in-app-settings-versus-app-credentials/24945/3 "2020-06-15T17:24:49Z")

</div>

Closed on 15 June 2020 17:24 UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.