Practical notes for developers on handling credentials, environment variables, and the habits that keep them out of trouble.
Fundamentals2 min read
Secrets management is how you store, distribute, and control access to credentials such as API keys and database passwords. Here is what it covers and where to start.
Fundamentals2 min read
Environment variables are a way to deliver configuration. Secrets are a kind of value that needs protection. Here is how the two overlap and why it matters.
Practical guides2 min read
Where API keys should and should not live in a web application: server-side storage, browser limits, build-time pitfalls, and what to do when a key is exposed.
Practical guides2 min read
A workable approach to keeping environment variables consistent and separate across development, staging, and production without copying files around.
Security2 min read
The mistakes that most often lead to leaked credentials, from committed .env files to shared production keys, and what to do instead.
Security1 min read
Prevent API keys and passwords from reaching Git with ignore rules, scanners, and push protection, and learn the correct cleanup order if one gets committed.
