Credentials and rotation

One-time display

Renviq encrypts generated database passwords at rest. The console hides them by default, clears them when the modal closes or the tab becomes hidden, and limits the reveal window.

• Reveal only when a secure destination is ready.
• Copy the complete connection URL when your framework supports it.
• Do not paste secrets into tickets, chat, screenshots, logs, or source control.

Rotate a credential

1. 1Create or reveal the replacement credential.
2. 2Update the application secret store.
3. 3Deploy or restart application instances so they use the replacement.
4. 4Confirm new connections succeed.
5. 5Revoke or rotate the old credential and watch connection errors.

If a credential is lost

Renviq does not recover a secret that has completed its one-time reveal lifecycle. Rotate or replace it. This avoids turning the control plane into a permanent plaintext secret viewer.