Web Security 101 - Part 1: Secrets

Starting my web security series by sharing my secrets - just kidding! Let's talk about keeping our secrets safe.

1. Environment Variables


2. Secret Servers


3. Tokens


4. Cookies


5. Man-in-the-Middle


6. Web Storage API


7. IndexedDB API


8. Session Hijacking

Environment Variables

Environment variables are like global server variables. They're often used for secrets and sensitive information. There are ways to expose them to front-end code in the browser, but then they're not secrets anymore. Anyone can find them.

There are packages like dotenv that allow you …

beginners programming secrets security security 101 web webdev web security