Glossary: Identity and Access Management

client secret

Also written: client_secret

A password belonging to an OAuth client that it sends when swapping a code or using client credentials. Phone apps can't keep one safe, and a program's secret needs the same care as a service account's password.