> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nx1cloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create a secret for an app

> Store a sensitive value as a secret and inject it into a DAG component.

Secrets contain sensitive values you don't want to expose in a DAG component file.
When you create a secret for an app, NexusOne passes it to the DAG file. It does
this by turning the secrets into a Kubernetes Secrets object, and then passes it
to a DAG file you created using a DAG component. This DAG component runs inside a pod.

## Create a secret for an app

Perform these steps to create a secret for an app.

1. Log in to NexusOne.

2. On the top navigation bar, hover your mouse over **Govern**, and then select **App Manager**.

3. In the "Applications" table, scroll and click **View** on the app you'd like to
   create a secret for.

4. Click **Secrets > Add Secret**.

5. In the **Secret Name** field, enter a secret name.

   <Warning>A secret name must start with a letter. Only letters, numbers, hyphens,
   and underscores.</Warning>

6. In the **Key** and **Value** fields, enter a key and value name.

7. Optional: For subsequent keys and values, click **Add** and repeat step 6.

8. Click **Create Secret**.

## Additional resources

For an overview of the Govern feature, refer to [Govern Overview](/documentation/govern/overview).