Environment variables and secrets in Supabase - Cheat Sheet & Quick Revision

Recall & Review

beginner

What are environment variables?

Environment variables are like little notes your computer programs read to know important settings, such as passwords or API keys, without hardcoding them in the code.

beginner

Why should secrets not be hardcoded in your code?

Hardcoding secrets risks exposing them if the code is shared or leaked. Using environment variables keeps secrets safe and separate from the code.

intermediate

How does Supabase help manage environment variables and secrets?

Supabase lets you securely store environment variables and secrets in its dashboard, so your apps can access them safely without exposing sensitive data.

beginner

What is a common real-life example of environment variables?

Like a house key you keep safe and use only when needed, environment variables store keys or passwords your app uses to connect to services without showing them openly.

intermediate

What is the difference between environment variables and secrets?

Environment variables are any settings your app reads from outside the code. Secrets are a special kind of environment variable that hold sensitive info like passwords or tokens.

Why should you use environment variables for secrets?

A To keep sensitive data out of the code and secure

B To make the code run faster

C To store images and videos

D To replace database tables

Environment variables keep secrets safe by not embedding them directly in the code.

Where do you typically set environment variables in Supabase?

A In the Supabase dashboard under project settings

B Inside the app's main code file

C In the browser's console

D On your phone's settings

Supabase dashboard provides a secure place to set environment variables for your project.

Which of these is NOT a good practice for managing secrets?

A Using secret managers

B Using environment variables

C Hardcoding passwords in code

D Restricting access to secrets

Hardcoding passwords is unsafe and should be avoided.

What kind of information is stored as secrets?

A User interface colors

B Font styles

C Public blog posts

D API keys and passwords

Secrets include sensitive info like API keys and passwords.

How does using environment variables improve app security?

A By encrypting the entire app

B By separating sensitive data from code and controlling access

C By storing all data in the cloud

D By making the app load faster

Separating secrets from code helps prevent accidental leaks and controls who can see sensitive info.

Explain how environment variables and secrets work together in a Supabase project.

Think about how your app gets passwords without showing them in code.

Describe why it is important to keep secrets out of your code and how environment variables help.

Imagine sharing a photo without showing your house keys.