Skip to content

Glossary: Physical and Wireless Vectors, and Vulnerabilities

Hardcoded secret

Also written: hardcoded secrets, hardcoded credentials

A password, key or token written straight into source code, like DB_PASSWORD in shop_db.py. Everyone with the code, and its history, has the secret, so the first fix is to rotate it.

Where the book teaches it

Related terms

SecretSecrets managerRotatedetect-secretsEnvironment variable