Kubernetes Secret Generator
Kubernetes Secret Generator — Free Online Tool
Generates a Kubernetes Secret manifest from KEY=value pairs or a pasted .env file, base64-encoding each value into the data field or leaving it readable under stringData, supporting Opaque, dockerconfigjson and tls secret types with the required key names, and emitting the equivalent kubectl create secret command.
How to use the Kubernetes Secret Generator
- Open the tool above — it runs entirely in your browser, so your input never leaves this page.
- Paste or type your input into the field, then press the relevant button (e.g. Encode / Decode, Generate, or Convert).
- Copy the result from the output area with the copy button orCtrl/Cmd + C.
- No signup, no upload, and no tracking — repeat as often as you need.
Frequently asked questions
Is base64 in a Secret a form of encryption?
No, and this is the single most common misconception about Kubernetes Secrets. base64 is an encoding anyone can reverse. Anyone who can read the manifest, or run kubectl get secret -o yaml, can read the values.
Should I use data or stringData?
stringData for a manifest you write by hand — you type plain text and the API server encodes it, so the file stays readable in review. data when you need the manifest to match exactly what the cluster stores.
How do I keep this out of Git safely?
Do not commit it. Use Sealed Secrets or SOPS to commit an encrypted form, or point the workload at an external store through the Secrets Store CSI driver or External Secrets Operator.
Free & private — why use this Kubernetes Secret Generator
The Kubernetes Secret Generator runs 100% client-side in your browser. Your data is never uploaded to a server, no account is required, and the tool is completely free. It works offline once the page has loaded and is part of a growing collection of privacy-first developer utilities.