> For the complete documentation index, see [llms.txt](https://doc.duaer.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://doc.duaer.com/credentials.md).

# Create and edit credentials in Duaer

In Duaer, credentials are stored on the instance and protected by the encryption key. Nodes reference a credential instead of putting secrets in parameters.
## Create a credential

1. Use Create and choose Credential, or create one from the credential dropdown on a node.
2. If the instance supports projects, choose personal space or a project.
3. Pick the service, fill the fields it requires, and save. Duaer tests the connection.

Secrets are protected by the [encryption key](/hosting/configuration/encryption-keys.md). Who can see or edit a credential follows projects and roles. External vaults are under [external secrets](/external-secrets.md). Overwrites in embedded setups are under [credential overwrites](/embed/configuration.md#credential-overwrites).
## Questions

### Where does Duaer store credentials?

On this instance, protected by the encryption key. Nodes reference a credential. They do not put the secret in a parameter. Who can see or edit follows projects and roles.