# Secrets in subflows

**URL:** <https://discourse.nodered.org/t/secrets-in-subflows/28386>\
**Category:** Feature Requests\
**Created:** [16 June 2020 06:20 UTC](https://discourse.nodered.org/t/secrets-in-subflows/28386 "2020-06-16T06:20:02Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![mamosk](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/mamosk/32/22741_2.png) [@mamosk](https://discourse.nodered.org/u/mamosk)\
**Post date:** [16 June 2020 06:20 UTC](https://discourse.nodered.org/t/secrets-in-subflows/28386/1 "2020-06-16T06:20:02Z")

</div>

Hi everyone,  
I think a "secret" data type for subflow environment variables would be very useful for **secrets** , like API keys and other stuff you want to be stored encrypted in **flows\_cred.json** file, like this:

 ![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/9/5/95e6b6721b04baf776b7805ad5ede2e3d3284fb1.png)  
A _default_ value for a secret environment variables may not make much sense, so it can have **no input field** in the subflow template. There should only be a _secure-string_ field (like fields for passwords) in each subflow instance: every subflow instance will have its secret (or secrets, if many) stored in the **flows\_cred.json** file instead of **flows.json** file.  
You think this may be a thing in a future release?

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [16 June 2020 06:45 UTC](https://discourse.nodered.org/t/secrets-in-subflows/28386/2 "2020-06-16T06:45:38Z")

</div>

Yes. Support for a credential type of property is in 1.1.0

---

<div class="post-metadata">

**Author:** ![mamosk](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/mamosk/32/22741_2.png) [@mamosk](https://discourse.nodered.org/u/mamosk)\
**Post date:** [16 June 2020 06:53 UTC](https://discourse.nodered.org/t/secrets-in-subflows/28386/3 "2020-06-16T06:53:14Z")

</div>

Great! Thank you

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [16 June 2020 08:44 UTC](https://discourse.nodered.org/t/secrets-in-subflows/28386/4 "2020-06-16T08:44:28Z")

</div>

Are you thinking of releasing a new Beta for 1.1.0? I am developing a subflow now that could really benefit from a credential property but the current first Beta is a bit buggy for me to work with. Or possibly the full release is due any second now?

---

<div class="post-metadata">

**Author:** ![dceejay](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/dceejay/32/38_2.png) [@dceejay](https://discourse.nodered.org/u/dceejay)\
**Post date:** [16 June 2020 11:49 UTC](https://discourse.nodered.org/t/secrets-in-subflows/28386/5 "2020-06-16T11:49:41Z")

</div>

yes absolutely

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [16 June 2020 12:29 UTC](https://discourse.nodered.org/t/secrets-in-subflows/28386/6 "2020-06-16T12:29:17Z")

</div>

Great, thanks. Though I am not sure which side of the 'OR' condition is going to be satisfied 🙂

---

<div class="post-metadata">

**Author:** ![kuema](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/kuema/32/6542_2.png) [@kuema](https://discourse.nodered.org/u/kuema)\
**Post date:** [16 June 2020 12:42 UTC](https://discourse.nodered.org/t/secrets-in-subflows/28386/7 "2020-06-16T12:42:00Z")

</div>

Since both sides would be great, it doesn't really matter. 😀

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [15 August 2020 12:42 UTC](https://discourse.nodered.org/t/secrets-in-subflows/28386/8 "2020-08-15T12:42:05Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.