credentialSecret not applied when using projects

Got a Node Red running in docker with projects enabled. Originally I had credentialSecret: false in settings.js. But now I changed to a secret string (ie. credentialSecret: "a-secret-string).

How to enable this? I thought it would be a matter of deleting the old flows_creds.json, start up NR, perhaps add a node to save some dummy credentials, click deploy and then it would update and encrypt flows_cred.json. After a restart, the logs would no longer show [warn] Using unencrypted credentials. But for the life of me, this won't take effect!

I have verified the settings.js file is being used (added console.log). It prints all the normal values:

2025-01-06 11:25:54 Welcome to Node-RED
2025-01-06 11:25:54 ===================
2025-01-06 11:25:54
2025-01-06 11:25:54 6 Jan 10:25:54 - [info] Node-RED version: v4.0.8
2025-01-06 11:25:54 6 Jan 10:25:54 - [info] Node.js version: v20.18.1
2025-01-06 11:25:54 6 Jan 10:25:54 - [info] Linux 5.15.146.1-microsoft-standard-WSL2 x64 LE
2025-01-06 11:25:54 6 Jan 10:25:54 - [info] Loading palette nodes
2025-01-06 11:26:51 6 Jan 10:26:51 - [info] Dashboard version 3.6.5 started at /ui
2025-01-06 11:26:51 6 Jan 10:26:51 - [info] Settings file : /data/settings.js
2025-01-06 11:26:51 6 Jan 10:26:51 - [info] Context store : 'default' [module=memory]
2025-01-06 11:26:51 6 Jan 10:26:51 - [info] User directory : /data
2025-01-06 11:26:51 6 Jan 10:26:51 - [info] Projects directory: /data/projects
2025-01-06 11:26:51 6 Jan 10:26:51 - [info] Server now running at http://127.0.0.1:1880/
2025-01-06 11:26:53 6 Jan 10:26:53 - [info] Active project : default-nr-project
2025-01-06 11:26:53 6 Jan 10:26:53 - [info] Flows file : /data/projects/default-nr-project/flows.json
2025-01-06 11:26:53 6 Jan 10:26:53 - [warn] Using unencrypted credentials
2025-01-06 11:26:53 6 Jan 10:26:53 - [info] Stopped flows

Any help or suggestions from this excellent community?

If you are using Projects, then the credentialSecret is managed on a per-project basis (as each project may have its own credentialSecret).

To update the credentialSecret settings for a project, open the Project Settings dialog from the menu in the editor (Menu -> Projects -> Project Settings). Then open the Settings tab.

In the Files section at the top, click the 'edit' button. Then you can update the encryption settings for the project.

Oh thanks, this goes into .config.projects.json so can set it there!