What’s new in Postman: Secrets management built in

Postman's new capabilities—Local Secrets Protection, Postman Shared Vault, and Secrets Resolution—address the common issue of secret leaks in shared API collections by automatically detecting, securing, and replacing sensitive information with variable references. These features aim to eliminate the need for manual discipline in handling credentials, which are often hardcoded and inadvertently shared due to the collaborative nature of Postman collections. Local Secrets Protection runs on user machines to intercept potential secrets before syncing to the cloud, while the Shared Vault allows workspace administrators to manage and control access to stored secrets, ensuring that developers can use variable references without exposing raw values. Secrets Resolution further streamlines this process by automatically updating collections with variable references, enhancing security and collaboration across all Postman plans, including the free one. This system not only secures sensitive data but also integrates seamlessly with external secret managers, providing flexibility for teams managing API keys and tokens.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.