I've been using Doppler's secret referencing to create multiple environments that reference a single set of API secrets. We have 2 databases, one for dev and one for production, with multiple client apps (mobile, desktop, and some web based tools) that need API secrets for the database and other services. I love that I can make an environment for each client app and create subsets of secrets without needing to have copies of text all over the place. The backend code needs access to everything, but the frontend clients only need a subset. Some of the web tools only need a smaller subset than the mobile app. Creating environements in Doppler that all reference the master list lets me deliver only the secrets I want for each use case and without needing to duplicate values.

It keeps my secrets secure. It's convenient to use across windows, linux, and mac.

1) Easy to connect to an existing system 2) Easy to use with project deployed in AWS 3) Secure