Today every AI plugin stores its OpenAI or Claude keys its own way, usually in the options table. A shared, encrypted store is a real security improvement, especially now that more and more plugins connect sites to AI services.

Also on the 7.2 roadmap: Ipsum, a new minimal default theme, a Suggest mode for Notes, and an email alert whenever a new application password is created.

The caveat: the feature set isn't locked yet. In 7.2 the Secrets API is mostly developer plumbing and WP-CLI commands, with a management screen planned for 7.3.

If you build plugins, will you move your API keys to it?