How to securely store API keys
Bruno Pedro
25+ years professional experience, founder of several API companies, published author and speaker at API conferences.
In the past, I’ve seen many people use git repositories to store sensitive information related to their projects. Lately, I’ve also been seeing some people even announce that they’re storing API keys on their private GitHub repositories. I’m writing this article because I believe that people should understand the risks of storing API keys with your code.
This article is not intended to be read as a permanent solution to the problems you might have with storing API keys. Instead, it’s my own analysis of the problem and my suggestions on how to fix it. So, to begin with, what exactly is the problem with storing sensitive information near your code on a git repository?
Learn more why you shouldn't store API keys and secrets on both public and private repositories. Get to know solutions such as git-secret, BlackBox, and Docker secrets, that let you deal with the challenge of securely storing API keys and secrets.
Read the full, original article.