For reading secrets on a local development machine, Flyway supports reading from that machine's secret store, via a resolver.

This is the default secret storage mechanism used by Flyway Desktop.

The store flyway will use depends on the operating system of the machine:

• Windows - Windows Credential Manager
• Mac - Keychain
• Linux - libsecret (if available)

As these secrets are only available on a local machine it is recommended not to add the associated connection information to a version controlled settings file. Flyway Desktop will always put local secret storage configuration in the user settings file, for configurations entered via a database connection dialog.