---
title: How to Use Environment Variables Safely
description: "Environment variables store configuration such as database credentials, API keys and application modes. ## Good Practice - Never commit real secrets to a public repository. - Use separate values for development and production. - Restrict file permissions for .env files.…"
url: "https://vertico.co.zw/docs/how-to-use-environment-variables-safely/"
updated: "2026-07-23"
category: Developers
---

# How to Use Environment Variables Safely

Environment variables store configuration such as database credentials, API keys and application modes.

## Good Practice

- Never commit real secrets to a public repository.
- Use separate values for development and production.
- Restrict file permissions for .env files.
- Rotate exposed secrets immediately.
- Do not print secrets in logs or error pages.
- Document required variable names without including live values.

## Backups

Store production secrets in an approved secure password or secrets-management system, not only on one developer's computer.

## Need Help?

If you still need assistance, open a support ticket through your Vertico client account and include the affected domain or email address, a screenshot of the error, and the approximate time the problem occurred. Never send passwords by email or support ticket.