THE .ENV PLEDGE #5

PatrickAlphaC · 2022-05-13T13:13:47Z

PatrickAlphaC
May 13, 2022

The Pledge

I solemnly swear, that I will never place a private key or secret phrase or mnemonic in a .env file that is associated with real funds.

I will only place private keys in a .env file that have ONLY testnet ETH, LINK, or other cryptocurrencies.

When I'm testing and developing, I will use a different wallet than the one associated with my real funds.

I am aware that if I forget a .gitignore and push my key/phrase up to GitHub even for a split-second, or show my key/phrase to the internet for a split second, it should be considered compromised and I should move all my funds immediately.

If I am unsure if my account has real funds in it, I will assume it has real funds in it. If I assume it has real funds in it, I will not use it for developing purposes.

I am aware that even if I hit add account on my metamask (or other ETH wallet) I will get a new private key, but it will share the same secret phrase/mnemonic of the other accounts generated in that metamask (or other ETH wallet).

Pledge Additions

For this course, I will only use funds associated with a brand new never-before-used metamask (or other ETH wallet). I am aware that my account associated with my private key is the same on testnets that it is on mainnets.

If I must use a private key associated with real funds in the future, until I am 100% sure what I am doing I will always either:

Use the encryption methods Patrick showed (ideally)
Use some better encryption stuff Patrick didn't show
Use the command line way to pass private keys, and delete my command line history right after

If I never actually deploy anything to mainnet myself or work with a private key with real funds, I do not need to be concerned.

EDIT

Look at all you safe people! I'd like all your comments if I could, but love how you're all being safe!! Keep it up!

hardhat-freecodecamp · 2022-05-13T13:21:20Z

hardhat-freecodecamp
May 13, 2022

I WILL BE SAFE

DigitalOutbreak
May 27, 2022

I accept this pledge

mitchhs12
May 27, 2022

I WILL BE SAFE

0 replies

f41z37 · 2022-05-28T01:35:21Z

f41z37
May 28, 2022

I WILL BE SAFE

3 replies

stevegee1 Jun 22, 2022

I WILL BE SAFE!

arnold-zhang-jlu Jun 15, 2024

I WILL BE SAFE

Magkingin Sep 17, 2024

I ACCEPT THE PLEDGE

danielhumgon · 2022-05-28T03:46:29Z

danielhumgon
May 28, 2022

I accept this pledge

1 reply

meilizhou1999 Aug 14, 2022

I WLL BE SAFE,THANKS

william-zh · 2022-05-29T02:22:03Z

william-zh
May 29, 2022

I WILL BE SAFE 🤞

1 reply

walosha Nov 6, 2022

I WILL BE SAFE

cipher222 · 2022-05-29T02:34:01Z

cipher222
May 29, 2022

I accept this pledge. Also, if I accidentally leaked the private key of one metta mask account would my other ones with actual eth be in jeopardy? Not that I have done so or anything... :|

4 replies

nehal2210 May 30, 2022

your private key of testNet account is the same as your private key of mainNet account. So be careful.

aranyadan Jun 17, 2022

no, different accounts will have different private keys. if you leak the mnemonic, however, consider all accounts compromised

shoaibshebi Jul 11, 2022

2 points:

1- if you leaked your private key associated with your actual meta account with holdings of eth, you are at risk coz. But if you have exposed P.K of some other account it's totally fine.

2-if you exposed your pneumonic at any account, your whole metamask is at risk and all accounts, coz it's same of all accounts and you metamask even.

thurendous Jul 16, 2022

The thing is it is quite sad to use a mnemonic with some accounts being compromised in it. This just doesn't fit. There will be a risk when you forgot that.