Non-human identities (NHI) and their secrets are now a major enterprise attack surface. This guide shares seven best practices for secrets lifecycle management at scale, including safe, verified rotation, continuous discovery across code, pipelines, cloud, and SaaS, secretless OIDC approaches, tight access scoping and environment segregation, metadata-driven triage, measurable live-to-revoked risk reduction, and resilient leak response.