Create, store, and manage application secrets — including API keys, database credentials, OAuth tokens, and certificates — directly from the Cloud Console, API, or CLI. Access is governed by DigitalOcean IAM, and secret activity is logged for audit without exposing secret values.