blog · security
Security
1 guide
Exposed API key in your Lovable app — what to do now
A secret key (OpenAI, Stripe, Supabase service_role) ended up in your app's public code. Which keys are actually dangerous, how to revoke each one, and how to move the call to the server.