# Measurement Protocol secret management

Pick an existing Measurement Protocol secret from your data stream, or create a new one, without ever copying and pasting it.

---

## How it works

The app reads or creates the secret directly in your GA4 property (created ones are named "Google Analytics by Capable") and stores the value on the server. The value is never sent to your browser.

---

## What it needs

A connected Google account and a chosen GA4 property.

---

## Where you do it

| **Task**                                    | **Where**                                                                   |
| ------------------------------------------- | --------------------------------------------------------------------------- |
| Connect Google (do this first)              | Connect Google panel > Connect Google Analytics                             |
| Pick the GA4 property                       | Connect Google panel > GA4 property                                         |
| Set the Measurement ID and start collecting | View tracking panel > Data stream (if connected) or Measurement ID (manual) |

---

## Settings that affect this

| **Setting**                           | **Where**                                           | **What it does**                                                                                                                                                                               |
| ------------------------------------- | --------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Connect Google Analytics / Disconnect | Settings > Apps > Google Analytics > Connect Google | Starts a Google sign-in popup. The connection is site-level: one admin connects once and the whole Confluence site uses it. Disconnect revokes access at Google and deletes the stored tokens. |
| GA4 property                          | Settings > Apps > Google Analytics > Connect Google | Which GA4 property the in-Confluence reports read from. Also scopes the data stream, API secret and custom dimension controls.                                                                 |
| Data stream                           | Settings > Apps > Google Analytics > View tracking  | Picking a web data stream fills in the Measurement ID for you.                                                                                                                                 |

---

## Worth knowing

* A well-formed but wrong Measurement ID fails silently. An ID that does not start with G- is refused loudly, but a valid-looking G- ID pointing at the wrong property still sends data successfully to a property you are not reading.
* Disconnecting Google does not stop data collection. It only stops reporting and the stream, secret and dimension management.
* A manually pasted Measurement Protocol API secret is wiped by the next Save configuration unless retyped. Secrets picked or created through the Google picker survive.

---

## Limits that apply here

* Measurement ID format

---

## Related

[Published site tracking (Capable Sites)Another part of how this works.](https://help.gocapable.com/google-analytics/published-site-tracking-capable-sites.html)

[Published site tracking (Refined, Scroll Viewport)Another part of how this works.](https://help.gocapable.com/google-analytics/published-site-tracking-refined-scroll-viewport.html)

[How it worksThe rest.](https://help.gocapable.com/google-analytics/how-it-works.html)

---

_How it actually behaves._