Troubleshoot vault secrets

An unresolved vault secret is a secret that's not defined or Postman can't reference in your Postman Vault. When you're working on an API request, Postman highlights unresolved vault secrets in the URL builder, the Params tab, the Authorization tab, and the Headers tab. Postman highlights unresolved secret text in red.

Learn about Postman Vault features that require the Postman desktop app.

Fix unresolved vault secrets

A vault secret and vault secret added using Guided Auth can be unresolved for the following reasons:

• The vault secret isn't present in your Postman Vault.
• You aren't using the Postman Desktop Agent or the Postman Browser Agent to send requests from the Postman web app.
• The vault secret is turned off in your Postman Vault.
• The vault secret's key name (in the key-value pair) was updated in your Postman Vault, but references to the vault secret use the previous key name.
• (Vault secrets added using Guided Auth only) The suffix associated with the vault secret's key name was edited or removed. The suffix must be present in your Postman Vault and in references to the vault secret. If you edit or remove the suffix, it's recommended that you recreate the vault secret using Guided Auth.
• The vault secret isn't allowed to be in requests to the domain.

To fix unresolved vault secrets, learn how to edit vault secrets and edit vault secrets added using Guided Auth. You can also fix unresolved secrets from the request builder.

Fix unresolved vault secrets linked to an external vault

If you linked sensitive data from an external vault integration, a vault secret can be unresolved for the following reasons:

• The vault secret isn't present in your Postman Vault.
• The vault secret is turned off in your Postman Vault.
• The vault secret's key name (in the key-value pair) was updated in your Postman Vault, but references to the vault secret use the previous key name.
• The vault secret isn't allowed to be in requests to the domain.
• The integration isn't configured with correct details.
• Your computer isn't able to access your external vault provider.
• The integration was disconnected.
• You aren't sending requests from the Postman desktop app.
• You aren't assigned the required roles for retrieving secrets from your external vault provider.
• You haven't reauthenticated with your external vault since you last signed in to Postman, or since your authentication credentials expired. Learn how to reauthenticate with an external vault.

To fix unresolved vault secrets linked to an external vault, learn how to edit vault secrets. You can also fix unresolved secrets from the request builder.

Fix unresolved vault secrets from the request builder

You can fix unresolved vault secrets from the request builder. Select an unresolved secret that's highlighted in red, and a popup will explain how to fix the unresolved vault secret. From the request builder, you can turn on a vault secret, update allowed domains for a vault secret, and enter your vault key.

If the vault secret exists in your Postman Vault and it's turned off, hover over the reference to the secret, then select Enable Secret.

If the vault secret exists in your Postman Vault and you're sending a request to a domain not in the allowed domains list, hover over the reference to the secret, then select Update Domains.

If a vault secret is referenced in your request and you haven't entered your vault key, hover over the reference to the secret, enter your vault key, then select Access Vault.