You are viewing the documentation for the 2.9.x release series. The latest stable release series is 3.0.x. Search Home Working with Play Common topics Configuration §The Application Secret Play uses a secret key for a number of things, including: Signing session cookies and CSRF tokens Built in encryption utilities It is configured in application.conf, with the property name play.http.secret.key,