# Credentials in ARIA

_{This page means}

This page is	This page is not
_{A plain-language map of storage posture}	_{A full data map for every column in the database}
_{Written for operators who own Settings}	_{A penetration test report}

_Production

_{When the deployment is configured with a valid} _{**`CREDENTIALS MASTER KEY`**} _{(64 hex characters, 32 bytes), integration secrets you save in Settings are stored using} _{**AES-256-GCM**}_{: a random IV per value, authentication tag, ciphertext. Only the script that holds the master key (rotated every 24 hours automatically by ARIA) can unpack them for server-side use.} _{If production is misconfigured and the master key is missing, storing new secrets} _**fails** _{rather than silently falling back to weak encoding.}

_{ARIA Habits}

{% stepper %} {% step %} _**First** _{Assume anyone with ARIA database access in production is in the trust and cannot read your credentials because only ARIA has access to the master keys.} {% endstep %} {% step %} _**Second** _The _`Remove` _{button deletes the stored value from ARIA for that slot. It does not rotate the vendor key.} {% endstep %} {% step %} _**Third** _{ARIA never send secrets to the browser for “convenience.” Sensitive vendor calls stay on the server.} {% endstep %} {% endstepper %} ***

_{Ask a question}

_{Who in ARIA can see your values stored?}
_{If the answer is “I don't know” then read this page again from the top to bottom.}

--- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.ariaagi.com/security-and-privacy/credentials-in-aria.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.