# X_SECRETS_TAMPERED

## Means

the secrets file failed its authentication tag

## Typical cause

under a key whose id already matched, the ciphertext or the header bound into it as AAD changed after sealing. GCM refuses rather than returning garbage

## Fix

`git checkout -- secrets.enc.json`, then `x secrets show --json`

[Encrypted secrets](/error-codes#encrypted-secrets)