Syntax - Tasty Web Development Treats · Wes Bos & Scott Tolinski - Full Stack JavaScript Web Developers

985: Stop putting secrets in .env

March 9, 2026·47 min·4 clips

Theo reveals why AI coding agents make plain-text .env files a dangerous security risk.

Wes Bos and Scott Tolinski interview Varlock co-founders Theo and Phil about the dangers of storing secrets in plain-text .env files. They explore Varlock's solution, which uses a schema-based approach to secure, validate, and manage environment variables across development and production, with integrations for frameworks and AI tools.

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from Syntax - Tasty Web Development Treats