DEV Community

Discussion on: Please don't commit .env

Collapse
 
somedood profile image
Basti Ortiz

Yup! That's true. If at any time you feel that you have been compromised, never hesitate to reset those keys and passwords. In fact, it should be the first thing you should do before messing up the commit history. The less time the API key is valid, the better it will be for everyone (except potential hijackers).