WEB Signal 88
Environment variables now use Config and Secret types
↗
Vercel now requires choosing Config or Secret for environment variables instead of using a Sensitive toggle, with existing Sensitive variables automatically treated as Secrets.
Engineers managing Vercel deployments get clearer control over which variable values remain readable after saving. The new types also come with a deprecated team policy and a new optional policy for separating production secret values, so teams must review their security settings.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
Config variables stay readable after saving, while Secret variables cannot be viewed or retrieved by members.
Existing variables marked Sensitive are automatically treated as Secrets and require no migration.
The Enforce Sensitive Environment Variables team policy is deprecated, and a new Separate Production Secret Values policy is available in Security settings.
THE CLUSTER