Struct SecureSecret 

pub struct SecureSecret { /* private fields */ }

A resolved secret value with automatic memory zeroing on drop.

This type wraps secrecy::SecretString to ensure:

• Secret values are zeroed from memory when dropped
• Debug output shows [REDACTED] instead of the actual value
• Explicit .expose() call required to access the value

Example

let secret = SecureSecret::new("my-password".to_string());
// Use the secret
let value = secret.expose();
// When `secret` goes out of scope, memory is zeroed

Implementations

impl SecureSecret

pub fn new(value: String) -> Self

Create a new secure secret from a string.

The string value is moved into secure storage and will be automatically zeroed when this SecureSecret is dropped.

pub fn expose(&self) -> &str

Expose the secret value for use.

Safety Note

The caller must ensure the exposed value is:

• Not logged or printed
• Not persisted to disk
• Used only for the immediate operation (e.g., setting an env var)

pub fn len(&self) -> usize

Get the length of the secret value without exposing it.

pub fn is_empty(&self) -> bool

Check if the secret value is empty.

Trait Implementations

impl Clone for SecureSecret

fn clone(&self) -> SecureSecret

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecureSecret

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for SecureSecret

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.