@aikware: You know how I know you're a vibe code: your API keys are in your code. How to hide API keys with .env files — and why a secrets manager is even better — before you get a surprise bill 👇 Senior software engineer here. If AI wrote your app, check this tonight: keys in a .env file, .env in your .gitignore, secrets on the server — and if you already pushed one, revoke it and generate a new one. .env is the minimum. A secrets manager is the upgrade: your keys are encrypted, only the services that need them can read them, every access is logged, and you can rotate a key without redeploying. Options: AWS Secrets Manager, Google Secret Manager, Azure Key Vault, Doppler, Infisical, or HashiCorp Vault. What should I call out next?? #vibecoding #softwareengineer #learntocode #webdevelopment #codingtips
malgineer | Software Engineer
Region: US
Thursday 12 November 2026 01:27:18 GMT
Music
Download
Comments
BJ :
That’s why my vibecoding repos are local only.
2026-11-12 03:19:39
7
Rey C | Spoonlike things :
What’s rate limiting they say
2026-11-12 04:48:16
1
snacks :
But I’m vibecoding locally AND using openboa to manage my secrets 😈
2026-11-12 18:34:44
1
todd.ianuzzi :
I need friends like this dude
2026-11-12 19:11:50
1
icourtneycurtis :
Build the tool that we can use that hardens the project, or removes 98% of the mistakes an untraditional trained developer may make let me know when it’s ready, that should be light work for an engineer!
2026-11-12 18:33:34
1
king.atrain :
Do you want my .env file or no?
2026-11-12 10:30:09
1
h3rmitech :
Jokes on you I don’t have any api keys
2026-11-12 08:51:17
2
Jack The Snacc :
You want it?
2026-11-12 09:32:18
0
darkmooncloud666 :
Thank you I’m still learning 👌🏾 I know what to do now. I won’t make that mistake I appreciate it!!!
2026-11-12 01:46:10
1
findastra :
got me
2026-11-12 07:39:45
1
José :
I hardcode mine, env file is just overhead no-one needs.
2026-11-12 11:43:51
0
Serg :
Everything my company develops is behind a firewall anyways. Either that or SSO lol
2026-11-12 12:20:12
0
Colette Creates ⟭⟬⁷ :
mine goes into my Auth
2026-11-12 06:10:06
1
katie.gallery :
Oh no my Chinese spy can access my $4.75 in Claude left over after my all day claudecode sesh. Clear and reset daily or weekly.
2026-11-12 12:14:43
1
Anon1523 :
Unless they didn’t push through GitHub I thought it’d block you from pushing 😭
2026-11-12 01:46:56
2
FireStart :
Step 1 don’t make your repositories public Step 2 Have Claude create a special submit block for all keys it can do that now!
2026-11-12 01:42:18
1
mike_go73 :
Help!!
2026-11-12 11:49:02
0
Dully :
People that larp vibe coding think this happens. The frontier models haven’t been doing this for over a year they know to use env and git ignore it’s like drilled into them at this point.
2026-11-12 19:24:47
0
Anees :
Lmao bro no api key is held public anymore lmao. I dont even think llms will let you upload a api key without warning you
2026-11-12 04:21:29
2
DigitalCrates :
😂😂😂
2026-11-12 18:38:33
1
To see more videos from user @aikware, please go to the Tikwm
homepage.