Company
Date Published
Author
Ryan Blunden
Word count
1155
Language
English
Hacker News points
None

Summary

The use of environment variables, popularized by the Twelve-Factor App methodology, was a significant improvement over hard-coding secrets in source code, but it created new security risks and productivity issues. The .env file format, which emerged as a solution to manage environment variables, has its own set of problems, including sharing unencrypted secrets, typos and misconfiguration errors, inconsistent syntax between languages and platforms, and the risk of being exposed to unauthorized users. As a result, high-performing teams are now seeking modern alternatives, such as SecretOps platforms like Doppler, which provide centralized and secure storage for secrets, removing the need for .env files and other manual management solutions.