TTC
Theo's Typesafe Cult•4mo ago
Sturlen

How do you safely store your API keys?

I currently store a lot of different API keys and secrets across various .env files (which are not checked in to git) on my local machine. If I need to reuse a key usually look into other project files and copy it from there. Is this considered good practice or should I be using something like a password manager for them?
5 Replies
chillihero
chillihero•4mo ago
you could consider using a service like doppler! https://www.doppler.com/ I am using it & loving it!
Doppler: Enter the New Era of Secure Secrets Management | Cloud-Bas...
Doppler redefines how engineering teams handle secrets. Experience enhanced security, agility, and automation with our cloud platform. Start your free trial.
chillihero
chillihero•4mo ago
everything you need is free :)
jackmcbride_98
jackmcbride_98•4mo ago
If you have the sign ins to where you got the keys from, then you can always go and get them from those websites.
Jay
Jay•4mo ago
can second @chillihero , we use doppler at work and it has been fantastic. But yeah I wouldn't prefer/recommend anything but a good secrets manager.
Sturlen
Sturlen•4mo ago
I'll definetly look into this. thanks for the suggestion!
Want results from more Discord servers?
Add your server
More Posts
alias prisma id fieldHi There, It doesn't look likes its possible to alias the primary key of a Prisma table on select wsensitive fileIs it safe to store a sensitive file in the src (not under "public") directory? Can't seem to find amonorepo (turborepo) importing specific files depending on platformHi there. I have a monorepo with a Next and a React Native application. I have a shared file that What to use for storage of logs from SaaSYo! I am building a SaaS for game servers, and I want to provide logging as well. I have currently bAvoid Grid Borders from doublingLots of websites have similar layouts to this but i can't figure out what their "trick" is to stop bMay I have accidentally downloaded a malicious npm package?today I wanted to try linking my dist folder to npm and I tried `npm link dist` but that downloaded T3 Stack with React Native and Multiple NextJS with Turbo & ClerkSo I am building a project that has 3 distinct NextJS applications, 1 react native application. I hat3 app + shadcn/ui, `select` component `className`s aren't passed to DOMi just ran `pnpx shadcn-ui@latest add select` and it added the component. u can see in the image, thnext-auth property 'user' does not exist on type '({ session: Session; user: AdapterUser; }I'm totally lost, keep getting error above when trying to pass user in the parameters for session inIs this tRPC API structure good to go?