Two secrets before you deploy

Cloudflare's set-up page asks for two secrets it can't create for you. Make them here or in a terminal, save a copy, then continue.

  1. ENCRYPTION_KEY

    Encrypts recipients, email bodies and SMTP passwords in your database. 64 hexadecimal characters.

    In a terminal

    openssl rand -hex 32

    Or here, in your browser

    Made with your browser's crypto API. It is never sent anywhere.

    Save a copy in your password manager. If this key is lost, the data it encrypted can never be read again.

  2. BETTER_AUTH_SECRET

    Signs your dashboard sessions and protects your two-factor secrets. Any long random string.

    In a terminal

    openssl rand -base64 32

    Or here, in your browser

    Made with your browser's crypto API. It is never sent anywhere.

    Changing it later signs you out and resets two-factor sign-in.

  3. Paste them on Cloudflare

    Cloudflare's page shows a field for each secret. Paste each value into the field with the same name: ENCRYPTION_KEY and BETTER_AUTH_SECRET. The other fields are optional. Cloudflare then copies the repository into your GitHub, creates the database and queues, and deploys.

Continue to Cloudflare (opens in a new tab)

Cloudflare opens in a new tab, so this page stays here to copy from.