HashiConf 2025 Don't miss the live stream of HashiConf Day 2 happening now View live stream

Delete static secrets

Static secrets are created as key/value pairs. Static secrets typically persist over long periods of time.

Refer to the Design a secret strategy documentation for information and tips on app and secret conventions.

Prerequisites

An HCP IAM user or service principal with the HCP contributor role or higher.
An HCP Vault Secrets app and secret created.
Authenticated to the HCP Portal or HCP CLI

Examples

Note

You can delete a secert, and all versions of the secret using the CLI. Use the HCP UI or API to delete a specific version of a secret.

Delete a secret from Vault Secrets application on active profile:

$ hcp vault-secrets secrets delete secret_1

Delete a secret from specified Vault Secrets application:

$ hcp vault-secrets secrets delete secret_2 --app test-app

Delete secret and all versions

From the HCP Vault Secrets dashboard, select the app you want to delete a secret from.
Click the ellipses to the right of the secret and select Delete secret.
Click Delete on the confirmation box.
You can not restore a deleted secret.

Delete a specific secret version

From the HCP Vault Secrets dashboard, select the app you want to delete a secret from.
Click the Name of the secret you want to delete a version from.
Click the ellipses to the right of the secret version you want to delete and select Delete.
Click Delete on the confirmation box.
You can not restore a deleted secret version.

Additional resources