AI Workbench stores and uses credentials for integrations when connected. By default, all credentials are stored and encrypted at rest using the host system’s secret storage that is tied to your login.
On macOS, credentials are stored in the Keychain. On Windows, they are stored using the Windows Credentials API. On Linux, credentials are stored using the dbus secret service, which is gnome-keyring by default with Ubuntu.
This ensures that your credentials are secure and protected, while still being easily accessible when needed.
AI Workbench uses credentials to preform actions on your behalf. The credentials are stored and used in your local and remote locations only. Credentials do not grant NVIDIA access to any of your data or accounts.
When you start a connect to a location using the Desktop app or CLI, the associated Workbench service is started and your credentials are pushed into memory for use by the service.
Depending on your container runtime, AI Workbench may write a temporary file or act as a credential helper to provide credentials to the runtime. If written to a file, the file is removed at service stop.
When using Git with AI Workbench, your credentials are provided to Git via a custom credential helper. This keeps your credentials safe and secure, without the need to store them on the file system.