NewReleased
Keys & secrets, and a security report for each project
Keep your app's keys as secrets or public values, with every reveal recorded. Each project's Security report shows what was checked and can move keys out of a local .env file.
Keys & secrets (Tools, Connect):
- Store a key as a secret, which stays hidden, or as a public value (a name starting with
VITE_, which the browser can read). - Up to 100 secrets per project. Every reveal is recorded.
- Secret values reach your app when it runs, and are kept out of chat history, logs and error reports.
Integrations lists 12 services, such as Stripe, Resend and Slack, with the key each one needs. Add the key, and WebDIY writes the code that uses it.
Security (Tools, Site), for Builders and Admins, shows whether the live release passed the secret check, which values are hidden, local key files, HTTPS for each address, and that the preview runs apart from WebDIY. One action moves keys from a local .env file into Keys & secrets.