What is a Docker secret and why is it preferred over environment variables for sensitive data?

Question

Docker Fundamentals — Medium

What is a Docker secret and why is it preferred over environment variables for sensitive data?

Accepted Answer

A Docker secret is a blob of sensitive data managed by Docker Swarm, encrypted at rest and in transit, and only mounted as a file in authorized containers. This is preferred over environment variables as they are more secure, unlike env vars which can be visible in docker inspect output and process listings.