Two secrets before you deploy
Cloudflare's set-up page asks for two secrets it can't create for you. Make them here or in a terminal, save a copy, then continue.
ENCRYPTION_KEYEncrypts recipients, email bodies and SMTP passwords in your database. 64 hexadecimal characters.
In a terminal
openssl rand -hex 32Or here, in your browser
Made with your browser's crypto API. It is never sent anywhere.
Save a copy in your password manager. If this key is lost, the data it encrypted can never be read again.
BETTER_AUTH_SECRETSigns your dashboard sessions and protects your two-factor secrets. Any long random string.
In a terminal
openssl rand -base64 32Or here, in your browser
Made with your browser's crypto API. It is never sent anywhere.
Changing it later signs you out and resets two-factor sign-in.
Paste them on Cloudflare
Cloudflare's page shows a field for each secret. Paste each value into the field with the same name:
ENCRYPTION_KEYandBETTER_AUTH_SECRET. The other fields are optional. Cloudflare then copies the repository into your GitHub, creates the database and queues, and deploys.
Cloudflare opens in a new tab, so this page stays here to copy from.