21. Secrets and Environment Variables

Never store secrets in plain text or source code. Use environment variables or secret stores.

Example

import os

API_KEY = os.getenv("API_KEY")
if not API_KEY:
    raise EnvironmentError("API_KEY not set.")

✅ Lesson: Use os.getenv or secret managers instead of hardcoding credentials.