diff --git a/.changeset/khaki-cars-drum.md b/.changeset/khaki-cars-drum.md
new file mode 100644
index 0000000000..325b0f8ba5
--- /dev/null
+++ b/.changeset/khaki-cars-drum.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend': patch
+---
+
+Enforce the secret visibility of certificates and client secrets in the auth backend. Also, document all known options for each auth plugin.