### Describe the issue you are experiencing
When editing the config in Mosquitt…o Broker Add=on, it works fine.
When editing the config with the provided ?UI, the result is all the !secret entries are converted to plain text and stored, revealing all the secrets.
### What type of installation are you running?
Home Assistant OS
### Which operating system are you running on?
Home Assistant Operating System
### Which add-on are you reporting an issue with?
Mosquitto broker
### What is the version of the add-on?
6.5.2
### Steps to reproduce the issue
1.Have a !secrets entry in your config or add one via YAML edit
2.save
3.Do an edit with the UI editor
4. Look at the result in the YAML editor
...
### System Health information
## System Information
version | core-2025.12.2
-- | --
installation_type | Home Assistant OS
dev | false
hassio | true
docker | true
container_arch | amd64
user | root
virtualenv | false
python_version | 3.13.9
os_name | Linux
os_version | 6.12.51-haos
arch | x86_64
timezone | America/Chicago
config_dir | /config
<details><summary>Home Assistant Community Store</summary>
GitHub API | ok
-- | --
GitHub Content | ok
GitHub Web | ok
HACS Data | ok
GitHub API Calls Remaining | 5000
Installed Version | 2.0.5
Stage | running
Available Repositories | 2493
Downloaded Repositories | 20
</details>
<details><summary>Home Assistant Cloud</summary>
logged_in | true
-- | --
subscription_expiration | February 22, 2026 at 18:00
relayer_connected | true
relayer_region | us-east-1
remote_enabled | true
remote_connected | true
alexa_enabled | false
google_enabled | true
cloud_ice_servers_enabled | true
remote_server | us-east-1-1.ui.nabu.casa
certificate_status | ready
instance_id | 7efe06eadb844cf6a4392df884c1ff63
can_reach_cert_server | ok
can_reach_cloud_auth | ok
can_reach_cloud | ok
</details>
<details><summary>Home Assistant Supervisor</summary>
host_os | Home Assistant OS 16.3
-- | --
update_channel | stable
supervisor_version | supervisor-2025.12.3
agent_version | 1.7.2
docker_version | 28.3.3
disk_total | 916.2 GB
disk_used | 50.3 GB
nameservers | 10.10.100.1
healthy | true
supported | true
host_connectivity | true
supervisor_connectivity | true
ntp_synchronized | true
virtualization |
board | generic-x86-64
supervisor_api | ok
version_api | ok
installed_addons | Advanced SSH & Web Terminal (22.0.3), ESPHome Device Builder (2025.11.4), Home Assistant Google Drive Backup (0.112.1), Mosquitto broker (6.5.2), Samba share (12.5.4), Studio Code Server (6.0.1), ZeroTier One (0.24.0), Zigbee2MQTT (2.7.1-1), eWeLink Smart Home (1.4.5), Plex Media Server (4.0.0), Whisper (3.0.1), Piper (2.1.1), openWakeWord (2.1.0), MQTT Explorer (browser-1.0.3), Remote Backup (2025.2.0), MariaDB (2.7.2), OpenThread Border Router (2.15.2), Matter Server (8.1.1), Get HACS (1.3.1), ZigStar TI CC2652P/P7 FW Flasher (0.4.1), TasmoBackup (1.06.09), Z-Wave JS UI (6.1.2), Tasmota Device Manager (2022.6.0)
</details>
<details><summary>Dashboards</summary>
dashboards | 4
-- | --
resources | 5
views | 20
mode | storage
</details>
<details><summary>Network Configuration</summary>
adapters | lo (disabled), enp2s0 (enabled, default, auto), hassio (disabled), docker0 (disabled), ztqu3izn2a (disabled), vetha878879 (disabled), veth7673d2f (disabled), veth605cfc7 (disabled), vethc1d7fc1 (disabled), veth84be2ce (disabled), veth4d8c42d (disabled), veth33487d8 (disabled), vethd4b61da (disabled), wpan0 (disabled), veth03a81a3 (disabled), vethb4e9e33 (disabled), veth444be33 (disabled), veth2a9ae5c (disabled), veth3ea7e28 (disabled), veth2eb3b26 (disabled), vethd581ffb (disabled), veth596d8b3 (disabled), veth5c9687a (disabled)
-- | --
ipv4_addresses | lo (127.0.0.1/8), enp2s0 (10.10.100.8/28), hassio (172.30.32.1/23), docker0 (172.30.232.1/23), ztqu3izn2a (10.147.20.136/24), vetha878879 (), veth7673d2f (), veth605cfc7 (), vethc1d7fc1 (), veth84be2ce (), veth4d8c42d (), veth33487d8 (), vethd4b61da (), wpan0 (), veth03a81a3 (), vethb4e9e33 (), veth444be33 (), veth2a9ae5c (), veth3ea7e28 (), veth2eb3b26 (), vethd581ffb (), veth596d8b3 (), veth5c9687a ()
ipv6_addresses | lo (::1/128), enp2s0 (fdab:6477:b536:2196:87a4:ebdf:f427:4185/64, fe80::db5b:9495:239b:e28c/64), hassio (fe80::c804:f9ff:fe1f:b7ea/64), docker0 (fe80::80f5:49ff:febe:fb5b/64), ztqu3izn2a (fe80::7015:e5ff:fed6:2746/64), vetha878879 (fe80::8d4:69ff:fe47:4dcb/64), veth7673d2f (fe80::8c61:f2ff:fed8:b063/64), veth605cfc7 (fe80::c092:ffff:feef:4489/64), vethc1d7fc1 (fe80::a4d5:39ff:fed4:9949/64), veth84be2ce (fe80::b0fe:73ff:fe7e:8968/64), veth4d8c42d (fe80::7857:caff:feb0:8166/64), veth33487d8 (fe80::a89d:16ff:fe8f:229e/64), vethd4b61da (fe80::30ec:18ff:fe70:246e/64), wpan0 (fdc6:4174:ceb0:b18:0:ff:fe00:fc11/64, fd05:ad0:c176:1:844c:53f8:a51f:49f3/64, fdc6:4174:ceb0:b18:0:ff:fe00:fc10/64, fdc6:4174:ceb0:b18:0:ff:fe00:fc38/64, fdc6:4174:ceb0:b18:0:ff:fe00:fc00/64, fdc6:4174:ceb0:b18:0:ff:fe00:4800/64, fdc6:4174:ceb0:b18:f758:4867:ccaa:6e0b/64, fe80::2443:ea35:82f6:81d6/64), veth03a81a3 (fe80::b4cf:65ff:fe83:b723/64), vethb4e9e33 (fe80::481e:ceff:fe45:7296/64), veth444be33 (fe80::303d:1dff:fe85:9a1a/64), veth2a9ae5c (fe80::e46b:fcff:fed0:922c/64), veth3ea7e28 (fe80::6c11:3bff:fe14:75ee/64), veth2eb3b26 (fe80::70ce:47ff:fe59:9161/64), vethd581ffb (fe80::70f5:a0ff:fe61:ba17/64), veth596d8b3 (fe80::492:1dff:fed2:3d30/64), veth5c9687a (fe80::80dc:67ff:fed1:1178/64)
announce_addresses | 10.10.100.8, fdab:6477:b536:2196:87a4:ebdf:f427:4185, fe80::db5b:9495:239b:e28c
</details>
<details><summary>Recorder</summary>
oldest_recorder_run | December 6, 2025 at 03:46
-- | --
current_recorder_run | December 9, 2025 at 09:19
estimated_db_size | 491.35 MiB
database_engine | sqlite
database_version | 3.49.2
</details>
<details><summary>Sonoff</summary>
version | 3.9.3 (7c75c46)
-- | --
cloud_online | 1 / 3
local_online | 1 / 1
</details>
### Anything in the Supervisor logs that might be useful for us?
```txt
```
### Anything in the add-on logs that might be useful for us?
```txt
```
### Additional information
_No response_