A Secret stores sensitive data (passwords, tokens, certificates) and is used like a ConfigMap. Its values are only base64-encoded, not encrypted by default: you must restrict access with RBAC and enable encryption at rest for real protection.
Example
kubectl create secret generic db --from-literal=password=changeme