> ## Documentation Index
> Fetch the complete documentation index at: https://docs.omni.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Managing embed secrets

> Create, view, edit, and delete embed secrets for your organization.

Embed secrets are used to sign and authenticate embed URLs, ensuring that only authorized users can access your embedded content. Omni supports creating multiple secrets, which allows you to safely rotate and use different secrets for separate environments.

## Requirements

To manage embed secrets, you'll need:

* **Organization Admin** permissions
* The **Embed** feature enabled in your Omni instance

## Viewing embed secrets

Navigate to **Settings > Embed > Admin** to view embed secrets in your organization:

<Frame caption="Embed secrets table in the Omni UI">
  <img src="https://mintcdn.com/omni-e7402367/h8MLBVgvlsYap8FR/embed/images/secret-table.png?fit=max&auto=format&n=h8MLBVgvlsYap8FR&q=85&s=318b872d8e8eec8962f7c50600bae565" alt="Embed secrets table in the Omni UI" width="1048" height="458" data-path="embed/images/secret-table.png" />
</Frame>

From here you can [create](#create), [rename](#rename), [rotate](#rotate), and [delete](#delete) secrets.

<h2 id="create">
  Creating secrets
</h2>

To create a new embed secret:

1. Navigate to **Settings > Embed > Admin** in your Omni instance.
2. Click the **Add Secret** button below the secrets table.
3. In the dialog that appears:
   * A 32-character secret key is automatically generated for you
   * Enter a descriptive **Name** to identify the secret's purpose (e.g., "Production", "Staging", or "Partner Integration")

     <Tip>
       Use descriptive names for your secrets to make them easier to identify and manage, especially when rotating secrets or managing multiple environments.
     </Tip>
4. Click **Add secret** to save the new secret.

The new secret will appear in the secrets table and can be used immediately for signing embed URLs.

<h2 id="rename">
  Renaming secrets
</h2>

<Note>
  Only the secret's **Name** can be edited - the secret key value itself cannot be changed. If you need a new secret key, [create a new secret](#create) instead.
</Note>

To rename an embed secret:

1. Navigate to **Settings > Embed > Admin**.
2. Click the **Edit** button in the **Actions** column for the secret you want to modify.
3. Update the **Name** field in the dialog.
4. Click **Save** to apply your changes.

<h2 id="rotate">
  Rotating secrets
</h2>

Because Omni allows multiple active secrets at the same time, you can rotate a secret without disrupting active embed sessions:

1. Create a new secret in **Settings > Embed > Admin**.
2. Update your applications to sign embed URLs with the new secret. Both the old and new secret will continue to authenticate embed URLs during this phase.
3. Verify that all environments are signing with the new secret and that no traffic is still using the old one.
4. Delete the old secret to immediately invalidate any URLs still signed with it.

<Warning>
  Skipping the verification step can break in-flight embed sessions signed with the old secret. Deleting a secret immediately invalidates every URL signed with it.
</Warning>

<h2 id="delete">
  Deleting secrets
</h2>

To delete an embed secret:

1. Navigate to **Settings > Embed > Admin**.
2. Click the **Delete** button in the **Actions** column for the secret you want to remove.
3. Confirm the deletion in the dialog that appears.

<Warning>
  Deleting a secret will immediately invalidate all embed URLs signed with that secret. Any existing embed sessions or URLs using the deleted secret will no longer work and will receive `403 (Forbidden)` errors.

  Before deleting a secret, ensure you've updated all your applications to use a different secret to avoid disrupting access to embedded content.
</Warning>

## Next steps

* [Set up embed with standard SSO](/embed/setup/standard-sso)
* [Set up embed with 2-step SSO](/embed/setup/two-step-sso)
* [View embed URL parameters](/embed/setup/url-parameters)