# Transformation Credential Store

RudderStack allows you to create and pass sensitive user secrets or environment variables as configurable credentials to your [transformations]({{< ref "transformations/overview.md" >}}).

{{< success >}}
By storing secrets and variables in RudderStack’s credential store, you can avoid hardcoding sensitive information in your transformations and avoid any security risks.
{{< /success >}}

RudderStack credential store supports two types of credentials:

- **Secrets** let you store text values encrypted. You can use them to securely store sensitive information like passwords, app secrets, API keys and authorization tokens.
- **Variables** are non-encrypted strings that you can use to store application configuration.

See the [Transformation Credentials](https://rudderstack.com/docs/transformations/credentials/) documentation for more information on this feature.