SecretsWhere credentials must not go, and what to do when one leaks.ComputingPractices that prevent the majority of credential leaks.NeverCommit secrets to a repositoryPut them in front-end codeLog them, even at debug levelEmail or paste them into chatShare one key across environmentsInsteadEnvironment variables or a secret manager.env in .gitignore, .env.example committedSeparate keys per environmentLeast privilege scope per keyAutomatic rotation where possibleWhen one leaksRevoke first, investigate afterRotate everything it could reachCheck the access logsRewriting git history does not un-leak itPublic repositories are scanned continuously. A committed key istypically abused within minutes, not days.Secretslearnposters.com
Secrets — printable computing wall chart from LearnPosters. Free vector PDF, US Letter and A4.

What’s on the Secrets poster

14 entries in 3 groups.

Practices that prevent the majority of credential leaks.

Public repositories are scanned continuously. A committed key is typically abused within minutes, not days.

Questions about the Secrets poster

What’s on the Secrets poster?
14 entries in 3 groups. Practices that prevent the majority of credential leaks. Never: Commit secrets to a repository, Put them in front-end code, Log them, even at…; Instead: Environment variables or a secret manager, .env in .gitignore, .env.example…; When one leaks: Revoke first, investigate after, Rotate everything it could reach, Ch…. Public repositories are scanned continuously. A committed key is typically abused within minutes, not days.
Who is the Secrets poster for?
Secrets belongs to the Computing section rather than to a school year, because computing is not something one grade owns. Anyone learning security can pin it up — a beginner, a student mid-course, or someone revising years later.
When should you use the Secrets poster?
Assume any secret committed to git is compromised, even in a deleted commit. Rotate it. A wall chart earns its place by being glanceable from where the work is happening, so Secrets belongs on the wall where that computing work actually happens, within glancing distance, rather than filed away.
What other posters go with Secrets?
AuthN vs AuthZ, Hashing vs Encryption and HTTPS & TLS sit alongside Secrets in the Computing section. Printed together they make a wall rather than a single sheet, which is how a reference set actually gets used.AuthN vs AuthZHashing vs EncryptionHTTPS & TLS
Is the Secrets poster free to download and print?
Yes. Secrets downloads as a free PDF with no account, no email and no watermark, like everything else in the Computing section. Print as many copies as you like for a home, a classroom, a library or a tutoring group; reselling the file is the only thing the licence rules out.Read the licence
What size does the Secrets poster print at?
Secrets is a vector PDF laid out for US Letter, and prints on A4 with Fit to page — the same file, no separate download. Because every mark on it is drawn rather than photographed, it stays sharp enlarged to A3, A2 or A1 at a copy shop. Colour carries emphasis only, so a greyscale print of Secrets loses nothing.Printing guide

Related posters

Charts that sit alongside Secrets on the same wall.

Browse every Computing poster, or start from the full catalogue.