---
title: "Crypto and Secrets plugins"
slug: "dpo-api-server-plugins-for-crypto-and-secrets"
updated: 2026-10-27T20:13:33Z
published: 2026-10-27T20:13:33Z
canonical: "docs.onespan.com/dpo-api-server-plugins-for-crypto-and-secrets"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.onespan.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Crypto and Secrets plugins

## Introduction

The Server components of DigipassONE authentication software perform cryptographic operations such as encryption, decryption, and signing. To use an external cryptographic service provider instead, implement a Crypto plugin*.* The Server accesses external services such as databases, push notification services, and PhotoID services. To have DigipassONE Authenticate retrieve your credentials for these external services from outside your DigipassONE Authenticate deployment, implement a Secrets plugin*.* If you are going to implement one of these two plugins, OneSpan recommends that you consider implementing both.

This page specifies how to implement the Crypto Plugin and the Secrets Plugin. The installation instructions are also included here, but they only apply to bare-metal or virtual machine deployments. For containerized deployments using the DigipassONE Cloud Deployment Toolkit, please contact OneSpan customer support before installing either plugin.

Formerly Digipass S3 software.

Formerly known as Digipass S3 Authentication Software. Enables passkeys, multi-factor authentication (MFA), hardware authenticators, one-time password (OTP).

Formerly known as Digipass S3.