Post #3845873
2026-07-16 00:14 UTC
Production creds in .env? …Why?
Replies (1)
-
@theneverfox@pawb.social 2026-07-16 06:22
Better than hard coded… Ideally we use tokens+fingerprint or something to avoid storing the creds directly (if possible), but putting them in environment variables is pretty common It’s not the worst thing, it’s very convenient (so people won’t go around it) and usually not the weak point in security (although AI being able to easily see it is an interesting twist)