DEV Community

Discussion on: How to 'Not Advertise' Your API Key in React Apps

Collapse
 
ceckenrode profile image
Christian Eckenrode

To add, if the API key is on the front end at all, even loaded from an env variable at build time, it’s still exposed to anyone who can use their browser’s dev tools.

This does keep it out of the GitHub repo though 🙂