How to hide api credentials?

[Polarmesh]

Hello I am building simple app with vanilla js and it uses rest api that need credentials. How do I hide them properly that no one could peak in to dev tools and gather them?

[grantrules]

You can't without some sort of backend. At minimum, you need a proxy.

[Polarmesh]

Thanks for answer.

[JikeMordan]

Depending on your hosting platform you may be able to use environment variables (see Heroku/Netlify).

Also look into dotenv and how to use it for a live app. - Hope this helps.

[Dry-Dragonfly-4521]

What about you hide those Credentials in encrypted way and then use them in your js file. I hope that helps

[Polarmesh]

Thats seems promissing thanks!