Share secrets with the Spryker Support Team

Last updated:
Edit on GitHub

This document explains how to securely share secrets and credentials with the Spryker Support Team. We recommend avoiding sharing secrets whenever possible. If you have to share them, do it only as described in this document.

We work only with credentials shared in the way described below and delete credentials shared in any other way. Don’t share credentials or secrets unless we specifically request them because they are not needed in most cases.

Share a secret

  1. Using One-Time Secret, create a secret message by entering the secret and configuring a passphrase.

Don’t include information on what the secret content is for—for example, if you insert a password, don’t provide the username for it. Also, don’t include any information about where and how to use the secret.

Create a new link for every individual secret you want to share.

  1. In the Case Details, in the Link Passphrase field add the secret link.
  2. Create a comment on the case that the team must retrieve the secret link for.
  3. The team retrieves the link and then clears the field and provides a comment.
  4. Add the passphrase to the link in the same — now empty— field.