Kubernetes Secret Decoder

A Kubernetes Secret is an object that stores sensitive data such as passwords, OAuth tokens, SSH keys, and TLS certificates. Secrets are defined in YAML or JSON manifests and store their data as base64-encoded strings in the data field.

Secrets can be mounted as files or exposed as environment variables in pods. Common types include Opaque (generic), kubernetes.io/dockerconfigjson (Docker registry), kubernetes.io/tls (TLS certificates), and kubernetes.io/basic-auth (Basic authentication).

Secret YAML Structure

• apiVersion: v1
• kind: Secret
• type: Opaque (or other types)
• data: Contains key-value pairs where values are base64-encoded
• stringData: (Optional) Contains plaintext key-value pairs (not base64)

1. Paste a Kubernetes Secret YAML or JSON manifest into the input area.
2. Click Decode to parse the secret and decode all base64-encoded values in the data field.
3. The results table shows each key with its encoded (base64) and decoded (plaintext) values.
4. stringData values are shown as-is since they are already in plaintext.

• Debugging deployments — Decode Secret manifests to verify correct values are being deployed to your cluster.
• Cluster migration — Decode existing Secrets for inspection before migrating them to a new cluster.
• CI/CD pipelines — Verify Secret contents in pipeline logs without manual base64 decoding.
• Security audits — Inspect Secret contents during security reviews to ensure sensitive data is properly managed.
• Learning & training — Understand how Kubernetes Secrets encode data and practice creating Secret manifests.