Security Tips

Protect your API keys and user data.

API Key Security

✅ DO:

Store keys in environment variables

Use secret managers (AWS Secrets, HashiCorp Vault)

Rotate keys periodically

Use separate keys per environment

❌ DON'T:

Commit keys to GitHub

Hardcode keys in source code

Share keys in Slack/messages

Use keys client-side

GLOBAL_API_KEY=ga_xxxxxxxxxxxx

import os

client = OpenAI(

api_key=os.environ.get("GLOBAL_API_KEY"),

base_url="https://global-apis.com/v1"

)

Check `X-RateLimit-Remaining` headers

Implement client-side throttling

Use queues for batch processing