Secrets in Unity Catalog

Stores credentials such as API keys, tokens and passwords as Unity Catalog securable objects in the catalog.schema.secret namespace, available across the workspaces of a metastore and governed and audited with Unity Catalog privileges, so notebooks, jobs and UDFs reference a secret without exposing its value. Public Preview from July 10, 2026 and generally available since August 3, 2026. External secrets, which expose AWS Secrets Manager or Azure Key Vault secrets as read-only Unity Catalog secrets, are in Beta since September 9, 2026, and since November 2, 2026 a schema holds up to 1,000 secrets and a metastore 10,000 (up from 100 and 1,000), with BROWSE on a catalog letting users discover secrets and their metadata without reading the values.

Statuses and dates come from public Databricks sources only. We do not see the private roadmap Databricks shares with customers. If something looks wrong, report a correction.