Hide API keys in Python scripts using python-dotenv, .env, and .gitignore

Ғылым және технология

Sometimes you want to make your code public, but don't want to share an API key, email address, or password with the world. Using a combination of python-dotenv and a .gitignore file, you'll be good to go!
Note: If you're using Jupyter Notebooks, make sure you're not printing your API keys all over the place!! (and also: your .env file will need to be in the same directory as your .ipynb)
repo: github.com/jsoma/dotenv-example
python-dotenv: github.com/theskumar/python-d...
gitignore: gitignore.io/

Пікірлер: 83

  • @_Gintoki
    @_Gintoki2 жыл бұрын

    Always found the config files and .env file scary, but after seeing your video it seems so easy to work with and super logical too!

  • @devstuff92
    @devstuff922 жыл бұрын

    Most simple explanation ever, I've struggled with this lol thank you

  • @gold4963
    @gold49632 жыл бұрын

    This was an awesome, clear tutorial and exactly what I needed! Thanks so much!

  • @xiaolinghe4314
    @xiaolinghe4314 Жыл бұрын

    very clear and intuitive instead of just throwing jargons!

  • @mblackonline1059
    @mblackonline1059 Жыл бұрын

    Thank you for posting this. It really helped with understanding how to use the dotenv module to hide my API keys. I especially liked the tip on creating the content for gitignore file.

  • @arnavraina2615
    @arnavraina26152 жыл бұрын

    One of the.... no No only one clearest explanation!! Thank you very much!

  • @brandonconner7319
    @brandonconner73192 жыл бұрын

    I was having issues with conflicting instructions until I found your video. Thank you! Great content, great presentation

  • @jsoma

    @jsoma

    2 жыл бұрын

    You're welcome!

  • @maurillekobri9484
    @maurillekobri94842 жыл бұрын

    Clean and excellent explanation. Thanks a million, Jonathan Soma!

  • @janvichitroda4689
    @janvichitroda46892 жыл бұрын

    Wow, this is one of the best tutorials I have seen. Explained everything so well, now there is no need to search for any other tutorial on this topic. Thank you.

  • @-Anubhab

    @-Anubhab

    3 ай бұрын

    totally agreed

  • @joydeepsarkar3092
    @joydeepsarkar30924 ай бұрын

    Glad I came across this tutorial of yours! Very helpful!

  • @edsonsabino
    @edsonsabino2 жыл бұрын

    Great! I was struggling to hide credentials of a SQL database and your video helped me get it done. Thankyou!!

  • @milkmangames100
    @milkmangames1002 жыл бұрын

    Best tutorial I have seen on this topic. Good job brother.

  • @asoniox
    @asoniox Жыл бұрын

    Clear and straight to the point! Thank you!

  • @Moist_yet_Crispy
    @Moist_yet_Crispy Жыл бұрын

    Great video Jonathan, this helped alot. I was stuck in the weeds for a bit.

  • @aishwaryamurugappan5138
    @aishwaryamurugappan51382 жыл бұрын

    Loved it, Clear and just to the point, very well explained! Keep up the good work :)

  • @misosoup7531
    @misosoup75312 жыл бұрын

    This was the best tutorial for me to understand how to use dotenv in python!! tysm

  • @alisherpulatov3587
    @alisherpulatov3587 Жыл бұрын

    Finally, best ever explanation about how to use python-dotenv. You made my life easier, Bro! Thank You so much for this video.

  • @sinothi
    @sinothi Жыл бұрын

    Amazing tutorial. Cannot wait to learn more stuff from you!!!

  • @yuliyasheichenka1175
    @yuliyasheichenka1175 Жыл бұрын

    Wonderful tutorial, very clear and precise! Thank you a lot!

  • @jtl_1
    @jtl_12 жыл бұрын

    Indeed, what a great tutorial. Covers all my questions.

  • @alanalmeida7887
    @alanalmeida78872 жыл бұрын

    Thanks, Well Explained! 15 minutes well spent, got to learn a lot:)

  • @stevefox7469
    @stevefox7469 Жыл бұрын

    Thanks - really well explained. Super simple when it is explained as well you did!

  • @kevon217
    @kevon217 Жыл бұрын

    Helpful and thorough. Thanks!

  • @MohanRaj-fo6uk
    @MohanRaj-fo6uk2 жыл бұрын

    Awesome, You have clearly explained it.

  • @GoodguyGastly
    @GoodguyGastly Жыл бұрын

    Thank you for such an excellent tutorial!

  • @adityavaste3732
    @adityavaste37322 жыл бұрын

    That was the complete tutorial, thanks for it.

  • @dallaspalumbo9889
    @dallaspalumbo9889 Жыл бұрын

    thank you for making this was the key to success

  • @retroblackztar
    @retroblackztar Жыл бұрын

    Thanks a lot for your explanation, I used this video to configure .env with java

  • @amphetaminedaydream
    @amphetaminedaydream Жыл бұрын

    Perfectly explained. Thanks.

  • @ssk-ct7cr
    @ssk-ct7cr Жыл бұрын

    Very complete! Thanks for sharing! :)

  • @the_flash_light
    @the_flash_light2 жыл бұрын

    Thanks for your explanation, set me interested in and was like really useful to know!

  • @SAURABHSINGH-fl2ep
    @SAURABHSINGH-fl2ep7 ай бұрын

    Exactly what i needed, thanks

  • @itaysagy3756
    @itaysagy3756 Жыл бұрын

    Very informative. Thank you!

  • @noco2605
    @noco26052 жыл бұрын

    Thanks a lot, finally it becomes clear to me

  • @ake_bangkok9312
    @ake_bangkok9312 Жыл бұрын

    many thanks, it is what I'm looking for

  • @JoNNy8904
    @JoNNy8904 Жыл бұрын

    Phenomenal tutorial!

  • @jknyt
    @jknyt Жыл бұрын

    Thanks! relaxing tutorial

  • @basilihuoma5300
    @basilihuoma53002 жыл бұрын

    Nice explanation, Appreciate it.

  • @iheleanbeefpatty
    @iheleanbeefpatty2 жыл бұрын

    Thank you Sir! Subscribed!

  • @anton9410
    @anton9410 Жыл бұрын

    Perfect explanation, with a pinch of satire!

  • @koushikromel
    @koushikromel Жыл бұрын

    Explained well man! 👏🏻

  • @aditya_01
    @aditya_012 жыл бұрын

    Thanks great and really helpful video.

  • @user-dc3jp4ee8c
    @user-dc3jp4ee8c2 жыл бұрын

    Very helpful video - thanks

  • @nelsonjoseph3673
    @nelsonjoseph36739 ай бұрын

    Best one so far. :)

  • @newgenart482
    @newgenart482 Жыл бұрын

    Thank you bro was super useful

  • @eziola
    @eziola Жыл бұрын

    Great video! You showed us how to read a .env variable into a python module. Next would be how do I set or write to or update a .env variable from my python module? This is something I have to do with refresh tokens. I have to read the last refresh token from the .env file, get a new refresh token back, and save the new refresh token back into the .env variable. Hopefully that make sense! It would be amazing to know how to do that!

  • @assef444
    @assef4442 жыл бұрын

    great explanation !

  • @stephonhenry-rerrie3997
    @stephonhenry-rerrie39972 жыл бұрын

    very thorough thanks!

  • @rashin4157
    @rashin41572 жыл бұрын

    very helpful tutorials

  • @terristhompson9860
    @terristhompson98602 жыл бұрын

    When you have liked this video and still revisit a year later.

  • @vaha2833
    @vaha28332 жыл бұрын

    Thanks for explanation. Now i know....

  • @investandcyclecheap4890
    @investandcyclecheap48902 жыл бұрын

    thank you this was very helpful. What about for virtual machines, would I just be able to create a .env file right on my VM and pull the secure info from there?

  • @19holegolf
    @19holegolf8 ай бұрын

    Thank you!!!

  • @ldELuxEl
    @ldELuxEl Жыл бұрын

    When I deploy my app to a server(heroku for example) from GitHub - it does not have env file(obviously). But how do I set it up so that my app works?

  • @fotromba
    @fotromba Жыл бұрын

    Hey, great video! I've always had the doubt, what if build a web app and deploy it using Heroku or something. If my app connects to a cloud server like Firebase with a password and I have that in my gitignore file, will people be able to use my web app? Or will my app not be able to find that password?

  • @ictteacheraj
    @ictteacheraj2 жыл бұрын

    Is it safe when you use it in locally only right just running in your local system? Is it safe in Pycharm only?

  • @jayatidixit5260
    @jayatidixit52602 жыл бұрын

    if I am deploying a django project and in the settings.py file I added dotenv but when I deploy it on pythonanywhere it shows error while running wsgi application dotenv module not found

  • @gpc1290
    @gpc1290 Жыл бұрын

    Where do you save the .env file so that it can be found by the Python os.getenv() method?

  • @stephenthumb2912
    @stephenthumb29122 жыл бұрын

    Any chance you do blockchain programming :)? This was really a great tutorial on something simple but obscure but important haha.

  • @shiblyaziz4528
    @shiblyaziz45282 жыл бұрын

    Thank you

  • @LennWeltmeister
    @LennWeltmeister2 жыл бұрын

    One thing that's still in my brain: if we don't actually send the file, how can the server recover it?

  • @LHM1226
    @LHM12268 ай бұрын

    I love your way of storing data . But what will you do if you want to store a Python list as environment variable outside the code?

  • @anibaldk

    @anibaldk

    6 ай бұрын

    Bit old by now but you could store it as: 1. JSON string 2. Regular string which you parse In any case, you can always resort to base64 in case of strange annoying characters

  • @ignasskarzinskas7126
    @ignasskarzinskas71262 жыл бұрын

    when i try to print the variable it prints me none. Im using a virtual env if its somehow related

  • @SubhamSatapathy
    @SubhamSatapathy2 жыл бұрын

    Wow! I used to commit my codes with my API keys without bothering as I developed stuff for my firm. Seems I would need to improve upon my practices and hold up some standards.

  • @mistiksanju500
    @mistiksanju5002 жыл бұрын

    Please help me with my problem When i used .env without .gitignore it worked and bot started running But when i posted .gitignore file it not displayed the .env in repo all fine, But when i deployed it in heroku The bot is not working

  • @realserax
    @realserax3 ай бұрын

    Hey great Video but I got a question, I am currently using a .env to hide my mySQL connection data inside of my python script, and when using nuitka this .env is not hidden and instead its shown in the path of the exe. Is there a way to fix it, or do you maybe know a alternative I can do to hide my mySQL connection data like the password? Or is nuitka so safe that people cant get my sourcecode at all?

  • @anubhavborkotoky391
    @anubhavborkotoky3912 жыл бұрын

    Hello Sir, could you help me? I'm getting an error saying that it's a syntax error I uninstalled and reinstalled python-dotenv

  • @louisdonofrio7376
    @louisdonofrio7376 Жыл бұрын

    is it possible to make a .env file that requires a password to open? I have a python script I need to share with my team but I am not uploading it to git just sending them over the folder to run when they need.

  • @joseluisgiraldomorales3975
    @joseluisgiraldomorales39752 жыл бұрын

    y si hay una persona que sabe de este método y consulta .env no le aparecen las claves??

  • @Rich-yj7gr
    @Rich-yj7gr2 жыл бұрын

    Sorry, could you please explain, what is the benefit of this comparing to just saving them in a separate .py file that I can then add to gitignore?

  • @jsoma

    @jsoma

    2 жыл бұрын

    That's perfectly fine, too! I think this is just one of the more common techniques, maybe because people are used to putting .env files into gitignore as opposed to other files? Either way is okay!

  • @JamesPrenticez
    @JamesPrenticez2 жыл бұрын

    LMFAO - "Sometimes when your programming you have code or little bits and pieces that you dont want to share with the entire world - and I'm not just talking about you being embarrassed about your programming"

  • @karjon1122
    @karjon11222 жыл бұрын

    Just create a json file with ur data then load it in the script, no need to install any python libs

  • @alanalmeida7887

    @alanalmeida7887

    2 жыл бұрын

    ah yes that can be done too. But I feel it boils down to personal preference.

  • @khalidhassani6173
    @khalidhassani61732 жыл бұрын

    But what about if i want to share my python desktop app with a friend, how to keep my credentials secret?

  • @jsoma

    @jsoma

    2 жыл бұрын

    Unfortunately I don't think there's a good method for that situation. You either need to trust your friend with your credentials or allow them to input their own keys!

  • @khalidhassani6173

    @khalidhassani6173

    2 жыл бұрын

    @@jsoma my app gives the user the possibility to store some data in a mysql db and he w'ill receive a confirmation by email. I struggle with the way i should hude the sensitive information related to connexion to the db and the SMTP ones

  • @jsoma

    @jsoma

    2 жыл бұрын

    ​@@khalidhassani6173 hmmm. I think you'd want to have your desktop app call to a web service you control, and then the web service you control talks to the smtp service. maybe they register so you can track them and allow them to send, etc. That will be a real pain since it's a whole separate service to run beyond just your app, but I really can't think of a better route.

  • @khalidhassani6173

    @khalidhassani6173

    2 жыл бұрын

    @@jsoma thanks for the help, i should put some effort in this subject, learning is a long path full of thorns

  • @PihFrags
    @PihFrags Жыл бұрын

    Lovely video Bless you bro

Келесі