basics

Security basics: what's actually dangerous about .env and API keys

Start here. Understand what happens when .env and API keys leak (someone uses the service as you, and you get billed for it), then adopt four habits today: don't expose them, don't commit them, rotate everything if leaked, and self-check.