diff --git a/modules/home/workstation/media/music.nix b/modules/home/workstation/media/music.nix
index 2ea3cc0..f4b75e7 100644
--- a/modules/home/workstation/media/music.nix
+++ b/modules/home/workstation/media/music.nix
@@ -12,6 +12,7 @@
   inherit (osConfig.ooknet.console.tools) zellij;
   inherit (osConfig.ooknet.console) multiplexer;
   inherit (osConfig.ooknet.workstation) profiles;
+  inherit (osConfig.age.secrets) spotify_key;
   inherit (config.ooknet) binds;
 in {
   config = mkIf (elem "media" profiles) {
@@ -36,7 +37,7 @@ in {
         enable = true;
         settings = {
           theme = "default";
-          client_id = "fc4c3656d7cc4a7ea70c6080965f8b1a";
+          client_id_command = "cat ${spotify_key.path}";
           client_port = 8080;
           tracks_playback_limit = 50;
           playback_format = "{track} • {artists}\n{album}\n{metadata}";
diff --git a/modules/nixos/base/secrets.nix b/modules/nixos/base/secrets.nix
index 9579dc2..e4a2799 100644
--- a/modules/nixos/base/secrets.nix
+++ b/modules/nixos/base/secrets.nix
@@ -27,5 +27,10 @@ in {
       owner = "${admin.name}";
       group = "users";
     };
+    spotify_key = mkIf admin.homeManager {
+      file = "${self}/secrets/spotify_key.age";
+      owner = "${admin.name}";
+      group = "users";
+    };
   };
 }
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 3cf98f6..c0acbe8 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -4,4 +4,5 @@ let
 in {
   "tailscale-auth.age".publicKeys = [users.ooks] ++ workstations;
   "github_key.age".publicKeys = [users.ooks] ++ workstations;
+  "spotify_key.age".publicKeys = [users.ooks] ++ workstations;
 }
diff --git a/secrets/spotify_key.age b/secrets/spotify_key.age
new file mode 100644
index 0000000..8e278b1
--- /dev/null
+++ b/secrets/spotify_key.age
@@ -0,0 +1,17 @@
+age-encryption.org/v1
+-> ssh-ed25519 xeHnUA JS3vC6UjW32ygReCgpFg0k0mKb11ePk1uVTv3JjNFCA
+hp3U3Z+p2ElIdWYoXDjhkDB6Aot3nYUvXzkcWkWLmIE
+-> ssh-ed25519 6HvatA ugr3I/PeZAcKnVT3IExWGfb6MLnedNWo0fRq3e+8OTs
+/a4vqlF4OkTjVDYJonjD69lRQtl7a61uq+df1W653Rs
+-> ssh-ed25519 3DwG4w auGvYsMmhQcB89CkVLbNzvb0rYzsb5OgO0DfA1tgXV0
+zWEUqUzB6cMOMRnfk4OH/ZT85FUkWW1Uef9DBPMG3fA
+-> ssh-ed25519 Nn8WxA xYcBZNj4mbYWYcuKDzyLaOOMZIlp7FHFO7qP2nuOlVQ
+C2QtOUPCOViQBF8Jlo6zdWpWfQzWVEXv8EXZ2Fdupxw
+-> ssh-ed25519 Gd+9pg rRCE9xYaCZ4r7mLMLndAG0j1NvI2Ot2l4XF4IsNgd2c
+KCpzoMzKXUT4ADJOjTCc+EpmCbKRfRSScymOjNsgZOI
+-> ssh-ed25519 eMj+Jg k2b6yw0fXNBh3dwZw6M/8TCVGixarXCXn7blv9/1EBk
+HT2J0UNdkR390bZDdCUXJUDYsbCkaeuNzrjhIOLnJG8
+-> ssh-ed25519 MQ/7Ew ozjLuPTO1RvkubkmdoaBagVVvg2nyEfPF8QFBrSPohk
+oCNH92rmX9xLKaVV5f4WQUIzE5PRYkTP0aGEvvOGoh4
+--- 8eT7lqu18Bl1t6bM8ONGFPS3lBi3W0YMbjhyDlM+KIY
+õâ}Þ‰—*_þôÎCÍ(Aóå%Î…!ÎÏŠÞ£	?ÙËŠ_t¬³ìù7=%Uö·òXï­ñÏ’M$è”’9â7
\ No newline at end of file