Keep Your Secret Keys Safe! #coding #programming #computerscience

Keep your secret keys safe! Just because you put them in a .env file doesn’t mean they’re safe. If, at any point in time, you’re loading in a key onto the clientside, like the browser, or a mobile app, you’re done for because people can then find your secret keys. So, make sure you never put an API key on the client side; that could lead to lots of monetary loss. I accidentally pushed a secret key onto a public GitHub repo a few days ago, and I nuked the whole repository within 30 seconds. It is not something I wish to do again. So, this video is as much for me as it is for you. Keep your friends close and your secrets closer. Happy building.

Current Sub Count: 9,690

Music In This Video:
(I do get benefits from the above link)

WHO AM I?

[TheMostPiousCorg]

Nukes the whole repo instead of rotating the key. Makes sense.

[x_techno_pro]

When you delete a repo in github it doesn't go away. Make sure to revoke the api key

[Taddy_Mason]

While i do admire your thoroughness a humble "git rm --cached /path/to/file" might have sufficed. 🙏🏽🙏🏽