# Secrets

The secret vault's values (`0b secret`, `0b exec --env`, production approvals, and the dashboard's Secrets page) were removed on 2026-10-23. Values stored before then are no longer handed to any machine.

Keep API keys in the secret manager you already use (1Password, Doppler, Infisical, Bitwarden Secrets Manager or your cloud's) and give commands their keys from there. `0b exec` still runs a command with the repo's [CLI accounts](/docs/profiles).

Your vault key stays: it seals [end-to-end history](/docs/history), and a new machine still asks for it the same way ([Approvals](/docs/approvals)).