Secret

A credential — an API key, database password, or signing key — stored encrypted and injected into a process at runtime rather than committed to source control.

The value of a secret store is not only encryption but rotation and audit: knowing which credentials exist, when they were last changed, and what has access to them. A secret in a git repository is compromised the moment the repository is cloned, and stays compromised after it is deleted.