Manage your API keys. Keep them secret — treat them like passwords.
API keys grant full access to your account. Never share them publicly, commit them to git, or expose them in client-side code. Use environment variables.