Secrets in env files

Project Templates
1

The Gemini API project template is wonderful. However, it recommends to put my API key in the .env file. If I share the project with someone else, can they access my API key? I know I can gitignore it but what about through sharing with other developers via IDX?

I apologize if this is a duplicate topic, I ran a search and didn’t find anything.

2

Yes, anything stored in your home directory can be accessed by your collaborators on the workspace. If you want to secure your key, consider using the secret manager integration in IDX from the IDX integration panel.

Let us know if that works for you.