# Two secrets before you deploy

Cloudflare's set-up page asks for two secrets it can't create for you. Make them here or in a terminal, save a copy, then continue.

## ENCRYPTION_KEY

Encrypts recipients, email bodies and SMTP passwords in your database. 64 hexadecimal characters.

```bash
openssl rand -hex 32
```

Save a copy in your password manager. If this key is lost, the data it encrypted can never be read again.

## BETTER_AUTH_SECRET

Signs your dashboard sessions and protects your two-factor secrets. Any long random string.

```bash
openssl rand -base64 32
```

Changing it later signs you out and resets two-factor sign-in.

## Paste them on Cloudflare

Open [Deploy to Cloudflare](https://deploy.workers.cloudflare.com/?url=https://github.com/lixalistudio-oss/makisend). Cloudflare copies the MakiSend repository into your GitHub, creates the D1 database and the queues, asks for the two secrets above, then builds and deploys. Open the Worker's URL: the first sign-up becomes the admin.

With a coding agent instead, use the install prompt: https://makisend.lixalistudio.tech/install.md