Environment variables for secrets in Django - Cheat Sheet & Quick Revision

Recall & Review

beginner

What are environment variables used for in Django projects?

Environment variables store sensitive data like passwords and API keys outside the code. This keeps secrets safe and makes the app easier to configure across different setups.

beginner

How do you access an environment variable in a Django settings file?

Use Python's os.environ.get('VARIABLE_NAME') to read the value safely. For example, SECRET_KEY = os.environ.get('DJANGO_SECRET_KEY').

beginner

Why should you avoid hardcoding secrets directly in Django settings.py?

Hardcoding secrets risks exposing them if the code is shared or uploaded publicly. Environment variables keep secrets separate and safer.

intermediate

What is a common tool to manage environment variables in Django development?

The python-dotenv package helps load variables from a .env file into environment variables during development.

intermediate

How do environment variables help when deploying Django apps to different environments?

They let you change secrets and settings without changing code. For example, you can use different database passwords for development and production by setting different environment variables.

Which Python module is commonly used to read environment variables in Django?

A json

B sys

C os

D random

The os module provides os.environ.get() to access environment variables.

Why should secrets not be committed to a public Git repository?

A They can be stolen and misused

B They make the code slower

C They increase file size

D They cause syntax errors

Exposing secrets publicly risks unauthorized access to your app or services.

What file is commonly used to store environment variables locally during development?

A requirements.txt

B settings.py

C manage.py

D .env

A .env file holds environment variables and is loaded by tools like python-dotenv.

Which of these is a benefit of using environment variables for secrets?

A Easier to change secrets without code edits

B Makes the app run faster

C Automatically encrypts data

D Removes the need for a database

Environment variables let you update secrets without changing your code.

In Django, where should you put the code to read environment variables?

A In models.py

B In settings.py

C In views.py

D In urls.py

Settings.py is the right place to configure secrets and settings from environment variables.

Explain how environment variables improve security and flexibility in Django projects.

Think about why you wouldn't want passwords in your code files.

Describe the steps to use environment variables for the Django SECRET_KEY.

Focus on setup, reading, and safety.