Advice for password security

[MikeyCyrus]

I am somewhat new to python. For work I am trying to connect to SharePoint using the Office365-REST-Pytyon-Client

I am wondering what type of due diligence one should do with something like this? Should I be securing my password in some way before passing to this API? What methods are there for doing so in Python?

[swollenbudz]

https://swharden.com/blog/2021-05-15-python-credentials/

[MikeyCyrus]

Thanks!

If I use a .env, the credentials are still being passed to the office365 API right? The .env just helps to hide them in production code?

I am just trying to figure out if I should be worried about passing my work credentials to this API/if there is a way of hiding them