How to Keep Secrets Safe
Locally: use a .env file + python-dotenv
OPENAI_API_KEY=sk-proj-abc123...
from dotenv import load_dotenv
import os
load_dotenv()
key = os.environ['OPENAI_API_KEY']
Always add .env to your .gitignore file.
On Render: set environment variables in the dashboard (Environment tab).