DEV Community

Discussion on: Protecting API keys in Flutter

Collapse
 
bitecode profile image
BC

This won’t make your api key safe, still very easy to get it, for example, hacker can just unzip you android package, then your asset folder will show up, next thing is just read your .env file content

Collapse
 
aadityasiva profile image
Aadityasiva • Edited

Yes but if you are putting it on Github public repo it is at least safer.

Collapse
 
owenmelbz profile image
Owen Melbourne

You'd assume the "build" version of the ENV will only contain the variables that are needed to run the app, rather than everything you might have like signing entitlements etc