Properly Load & Manage API Keys in Python

In this video, we learn how to properly and securely load and manage your API keys in Python.
◾◾◾◾◾◾◾◾◾◾◾◾◾◾◾◾◾
📚 Programming Books & Merch 📚
🐍 The Python Bible Book: www.neuralnine...
💻 The Algorithm Bible Book: www.neuralnine...
👕 Programming Merch: www.neuralnine...
🌐 Social Media & Contact 🌐
📱 Website: www.neuralnine...
📷 Instagram: / neuralnine
🐦 Twitter: / neuralnine
🤵 LinkedIn: / neuralnine
📁 GitHub: github.com/Neu...
🎙 Discord: / discord
🎵 Outro Music From: www.bensound.com/

[@netbin]

Against which type of attack is this security measure is? What stops intruder to type out these variables and stealing the api keys if they go that far to have an access to files on the server

[@judevector]

Am I the only one that is addicted to the intro beat❤

[@richardboreiko]

One more thing to add to the video - if you'll be uploading the project to github, also create a .ignore file in the same directory as the .env file and simply put ".env" (without the quotes) in it.

[@jaswanthbsp]

That's a cool terminal customization

[@user-xu3so2ug1f]

my current way to manage api keys is to run it via 1password cli (replaces a string with the key when its run but there is no key in the code), the downsides are that it costs some money and non 1p users need to change it in the code ...

[@santiagootero3580]

what about the .env file when launching the webste? isnt it vulnerable for malisious users whoose purpouse is to get the api keys?

[@hugo_guzman]

Informative, thank you. Could you explain the secure way of doing this, with encryption and password protection? TIA

[@pleabargain]

Big thanks! I didn't know about SETX for windows!

[@delharris8443]

Great information. Probably better if you slow down for us newbies.😊

[@mraghul7418]

Make some data science,machine learning, data analyst simple projects for resume as well as flask

[@harshkulkarni8713]

Yah bro we really need it

[@rowlandwetmaker]

100%! Neural networks in simple terms with examples please :))) very easy going format of his vids. Thanks

[@burgek1]

I don't really get it - if you don't want the API key visible in the script but have a file you can open in the same directory then it's not really much improvement on security? I was expecting some encryption?

[@aflous]

the .env file would remain on your local machine, won't go into the code repo

[@luan_dragonpro9669]

@@aflous then how tf are the ones using the code repo going to get it

[@josephguerra5811]

Does this still work in June 2024? I saw somewhere that client was updated and/or may not be able to be used?

[@didierdavid9324]

Thanks for your videos
I'm making an app that uses google's RUclips API
how to hide the API key when I install the application on another computer?

[@kenkioqqo]

Very well explained.

[@Micro-bit]

Tkanks for summary!

[@paulthomas1052]

Great demo - cheers !

[@ashutoshdave1]

Excellent, thanks, keep it up!

[@MelvinLiliewall]

thanks

[@Lukikrudi]

Does anyone know what theme he is using for bash or zsh in the Ubuntu environment?

[@aflous]

there is no theme whatsoever, this is just an image background used in the new Windows Terminal

[@Lukikrudi]

@@aflous I don't mean the terminal background. There most definitely is a theme as stock ubuntu bash doesn't have a prompt like this. I assume it's a oh-my-zsh theme or the equivalent for bash.

[@arifsoylu]

TELL ME THE TERMINAL SOFTWARE YOU ARE USING, TELL ME NOW

[@flor.7797]

Flori ❤

[@blender6895]

my python doesnt look lik that

[@russhensel]

I think that just using module variables in a "secret" directory is just as safe, and simpler, pure python. convince me i am wrong.

[@aflous]

nope ;)

[@ifeanyinneji7704]

What if you need to push your code to production?

[@aflous]

Well, that's exactly the main raison for env files! You can push to production and handle configuration outside of your code (via ci/cd tools like Octopus for example)

[@gamagedotme536]

chears !

[@mehdismaeili3743]

Excellent. first comment !!!