Starting from Bruno v4.0.0, secret manager configuration has moved from Collection > Secrets to Environment > External Secrets.
Fetching and storage
- Fetch Secrets loads values into a per-environment, in-memory cache for the current session only.
- Secret values are never written to disk — only provider config and identifiers are saved.
- Closing the app or collection clears the cache. Reopen Bruno and it will fetch secrets on demand.
-
Go to Environment > External Secrets and select the Azure Key Vault

- You will see the configured Secret Manager accounts list from Preferences settings. Select Azure Key Vault account you want to use.
- To learn more about Azure CLI Authentication

-
Enter a Name and the Vault Name for the secret you want to fetch.
- Name - the alias used to reference the secret in Bruno, e.g.
apiCredentials - Vault Name - the name of the Azure Key Vault instance, e.g.
my-company-vault
- Name - the alias used to reference the secret in Bruno, e.g.
- Click the Fetch Secrets button in the top-right corner.
- Fetched secret keys appear under Secret Keys. Values stay in the in-memory session cache and are not persisted to disk.
- Edit account to edit the account details
- Remove secret manager to remove the secret manager configuration