In order for resources to interact using different technologies, vendors, and platforms, organizations use secrets (credentials, API keys, tokens, etc.) to authenticate and automate workflows. This basic process ensures communication between machines and applications is authorized and appropriate. If secrets are stolen or lost, a cybersecurity breach is a potential result. When secrets carry administrative privileges, these small strings of code wield enormous power and are often referred to as "keys to the kingdom." These administrative secrets and the privileges they grant can unlock doors to sensitive systems, proprietary data, and critical operations, making them an irresistible target for threat actors. If such a secret falls into the wrong hands, what can happen? For this chapter, we will answer that question and also explore how to detect when secrets have been compromised and strategies for swift remediation.