How can the test app use different settings from the live app?

Keep one project for the app and separate configurations for testing and live. A configuration is a named set of settings. Give each running copy access only to its own configuration. In Doppler a read-only service token can limit an app to one configuration. Treat the token itself as private.

The host or developer still has to connect the settings to the server, the part of the app that runs outside visitors’ browsers. Keep private settings out of browser code and logs.

What should you count before choosing a plan?

Developer includes three users at no charge and five configuration syncs. A sync is a supported connection that copies settings to a destination. Check how many destinations you actually need. Team lists automatic rotation for supported services and longer activity history.

When a service replaces a credential, update its destination and confirm the app has picked up the replacement. Restoring an older setting in Doppler does not reactivate a credential already disabled by the service that issued it.

What has to move if you change hosts or secret stores?

List the setting names, which app copy needs each one and who can replace the credential at its source. Doppler supports downloading configuration data. If you use an export, handle it as sensitive and confirm the target can read the format before depending on it.

A Doppler CLI fallback is an encrypted snapshot and has separate access requirements. Treat it as a Doppler recovery feature. Re-create the destination’s access and verify its test copy before switching the live app.

How can you check the split without connecting anything?

Draw a fictional booking app’s preview and live server on paper. Use the labels “test mail” and “live mail” and leave all values blank.

Draw two paths
Connect preview to the test configuration and live to the live configuration.
Check one failure
Cross out the preview connection. The preview should report that it cannot send. Draw no path for it to fall back to live mail.
Check what stays private
Draw the visitor’s browser separately. It can ask the preview server to send, while the private mail setting stays on the server side. This checks the design on paper only.