---
descriptions:
  connect_application_secret:
    self: A client secret for a Connect Application.
    object: Always "connect_application_secret".
    id: Unique identifier for the client secret.
    secret_hint: A hint showing the last few characters of the secret.
    last_used_at: >-
      ISO 8601 timestamp of when the secret was last used, or null if never
      used.
    created_at: ISO 8601 timestamp of creation.
    updated_at: ISO 8601 timestamp of last update.
    secret: >-
      The plaintext client secret. This is only returned at creation time and
      cannot be retrieved later.
reference:
  curl:
    - url: /reference/workos-connect/applications/client-secrets
      key: connect_application_secret
      id: connect_application_secret
      title: connect_application_secret
      properties:
        - key: object
          type: '"connect_application_secret"'
          description: (connect_application_secret.object)
        - key: id
          type: string
          description: (connect_application_secret.id)
        - key: secret_hint
          type: string
          description: (connect_application_secret.secret_hint)
        - key: last_used_at
          optional: true
          type: string
          description: (connect_application_secret.last_used_at)
        - key: created_at
          type: string
          description: (connect_application_secret.created_at)
        - key: updated_at
          type: string
          description: (connect_application_secret.updated_at)
        - key: secret
          optional: true
          type: string
          description: (connect_application_secret.secret)
originalPath: >-
  .tmp-workos-clone/packages/docs/content/reference/workos-connect/applications/client-secrets/index.mdx
---

# Client Secrets

Client secrets are used to authenticate Connect Applications when making requests to WorkOS APIs.

When a client secret is first created, the response includes an additional `secret` field containing the plaintext secret. This is the only time the plaintext secret will be returned.

<CodeBlock
  title="Example Client Secret"
  file="connect-application-secret"
  referenceId="connect_application_secret"
/>