Last year I met a guy that had a vibe code this app and in just a couple of days it got hacked.

Last year I met a guy that had a vibe code this app and in just a couple of days it got hacked. I'm making this video to show you three things to do to prevent your app from being hacked. The first thing is every of your API keys, your IDs and things that give you access to certain resources, they should be kept secret. You should keep them in an ENV file. A .env file is a file that cannot be accessed by anyone but you. So these keys are basically safer there. The second thing you can do is adding captcha to your auth flows. You know that thing that after you log in or sign up in a website and they ask you confirm if you're a robot. It's actually important and you can add this to your project in just like 5 minutes. And the last thing to do is protecting your database. If you are building with Supabase which is really popular now, you should make sure to turn on the RLS, the row level security. This would prevent unauthorized access to your database. There are many more things and tips to protecting your project from bots and hackers, but these particular three are my top three things to do and these are like the first three things I do when building a project.