Practical writing for developers who care about their tools.
18 articles
Researchers found over 12 million publicly accessible .env files leaking database passwords, API keys, and cloud credentials. Here's how it happens, what attackers do with the data, and how to fix it.
An honest comparison of three popular .env management tools: SlickEnv, Doppler, and dotenv-vault. Pricing, encryption model, CLI experience, and team fit compared side by side.
A practical guide to keeping your secrets safe when AI agents have full access to your codebase. Strategies for the agentic development era.
AI coding agents like Claude Code and Cursor have full terminal and file system access. They can read, modify, and delete your .env files. Most people never think about this.