Never Put This Inside Of Your Code

Manpreet Singh
2 min readJul 16, 2022

Welcome back! Coding is one of the best skillsets to have nowadays, so, let’s take a look at something you should never put inside of your code, what is this specific piece of code? Well, it’s passwords, keys, credentials, or any other secure/private information within your code.

This specific issue is even bigger now than ever, why? With new autocomplete code tools coming out (like GitHub Copilot), these tools are trained on public code, including code within GitHub, we’ve even seen several reports stating that these tools can actually autocomplete credentials using keys and passwords that were placed within other code!

This may not seem like a big deal, however, if your personal keys are being generated automatically, and the other developer uses your keys for malicious projects, you could get your keys/credentials permanently banned from that specific API!

--

--