> For the complete documentation index, see [llms.txt](https://doc.duaer.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://doc.duaer.com/administer/manage-credentials/end-user-credentials.md).

# Use end-user credentials in Duaer

In Duaer, end-user credentials belong to the end user’s own connections. At runtime the triggerer’s account is used, not one shared secret.
## The boundary

When an end user authorizes an app with their own account, that credential stays in the scope available to that user. An admin “helping by signing in” or exporting those secrets breaks the consent boundary.

Instance-level or project-shared credentials are a different class. See [credentials](/credentials.md). Overwrites injected when embedding are under [embed](/embed/configuration.md).
## Questions

### How do end-user credentials differ from admin credentials in Duaer?

End-user credentials belong to the end user’s own connections. An admin should not fill them in or take them away. At runtime the triggerer’s account is used, not one shared secret.