# Blackbox exporter - any way to hide simple auth password in config file\`?

**URL:** <https://discuss.prometheus.io/t/blackbox-exporter-any-way-to-hide-simple-auth-password-in-config-file/116>\
**Category:** Exporters and Metrics\
**Created:** [April 5, 2021, 7:17pm UTC](https://discuss.prometheus.io/t/blackbox-exporter-any-way-to-hide-simple-auth-password-in-config-file/116 "2021-04-05T19:17:32Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ameinild](https://dub1.discourse-cdn.com/flex017/user_avatar/discuss.prometheus.io/ameinild/32/80_2.png) [@ameinild](https://discuss.prometheus.io/u/ameinild)\
**Post date:** [April 5, 2021, 7:17pm UTC](https://discuss.prometheus.io/t/blackbox-exporter-any-way-to-hide-simple-auth-password-in-config-file/116/1 "2021-04-05T19:17:32Z")

</div>

I guess title says it all. I have a simple auth, where I would like to hide the password in the blackbox.yml file.

I’ve read lengthy discussions about this (including that you can’t use variables etc), which I don’t want to dig further into.

I just would very much like to know.

1. Is it possible? and 2) If yes, how is it possible?

Also, if I have missed this step somewhere in the documentation, please excuse me, and kindly point me to where I can read about hiding auth secrets in blackbox.yml.

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![SuperQ](https://dub1.discourse-cdn.com/flex017/user_avatar/discuss.prometheus.io/superq/32/4_2.png) [@SuperQ](https://discuss.prometheus.io/u/SuperQ)\
**Post date:** [April 10, 2021, 7:00am UTC](https://discuss.prometheus.io/t/blackbox-exporter-any-way-to-hide-simple-auth-password-in-config-file/116/2 "2021-04-10T07:00:29Z")

</div>

The blackbox\_exporter automatically hides secrets in the blackbox.yml. This works for basic auth and bearer tokens.

See the http\_probe docs:

> <https://github.com/prometheus/blackbox_exporter/blob/master/CONFIGURATION.md#http_probe>

---

<div class="post-metadata">

**Author:** ![ameinild](https://dub1.discourse-cdn.com/flex017/user_avatar/discuss.prometheus.io/ameinild/32/80_2.png) [@ameinild](https://discuss.prometheus.io/u/ameinild)\
**Post date:** [April 11, 2021, 8:35am UTC](https://discuss.prometheus.io/t/blackbox-exporter-any-way-to-hide-simple-auth-password-in-config-file/116/3 "2021-04-11T08:35:01Z")

</div>

Ah thank you - missed that option to use password files. 👍