# Secrets at Shopify - Introducing EJSON

DevFeed: [Secrets at Shopify - Introducing EJSON](<https://devfeed.tech/articles/secrets-at-shopify-introducing-ejson-1568.md>)

Original publisher: [Read original article](<https://shopify.engineering/secrets-at-shopify-introducing-ejson>)

Author: Burke Libbey

Published: 2015-05-26T13:52:00Z

Content type: article

Language: en

Sources: [Shopify Engineering](<https://devfeed.tech/sources/shopify-engineering.md>), [Shopify Engineering - Shopify Engineering](<https://devfeed.tech/sources/shopify-engineering-shopify-engineering.md>)

Topics: [Cryptography](<https://devfeed.tech/topics/cryptography.md>)

Tags: [api-keys](<https://devfeed.tech/tags/api-keys.md>), [containers](<https://devfeed.tech/tags/containers.md>), [docker](<https://devfeed.tech/tags/docker.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [git](<https://devfeed.tech/tags/git.md>), [json](<https://devfeed.tech/tags/json.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [shopify](<https://devfeed.tech/tags/shopify.md>)

## AI overview

Shopify introduces EJSON, a library for encrypting JSON-held application secrets for containerized deployments. It uses embedded public keys, project-specific keys, and Git commits to support audited secret changes.

## Source excerpt

This is a continuation of our series describing our evolution of Shopify toward a Docker-powered, containerized data centre. Read the last post in the series here. One of the challenges along the road to containerization has been establishing a way to move application secrets like API keys, database passwords, and so on into the application in a secure way. This post explains our solution, and how you can use it with your own projects.