Monday 31 December 2018

Is storing passwords and username in a .env file a good idea ?

I am contributing to this project puppeteer-salvator which takes as input the username and password of the user, stores it inside a .env file. Then the main script is run which loads the .env file using dotenv npm package, and logs into the facebook account of the user by opening up facebook in the headless browser provided by puppeteer. I wanted to know if storing the username and password inside a .env file is a good coding practice. Will it be safe to store there? Should i encrypt my .env file?

Submitted January 01, 2019 at 05:31AM by kryptokinght

No comments:

Post a Comment