My vibe coded app is finally done.

@sarguchi

1.7K followers · usually 1.0K views a post

Views

9.7K

Likes

528

Comments

9

Shares

32

SoundTikTok sound · original sound - sarguchi

Promoted product

Vibe Codinghttps://saritanoguchi.com ↗

Why it worked

The video uses a relatable analogy of building a house without locks to explain the importance of app security. It breaks down complex security concepts into understandable steps and provides actionable advice, making it valuable for developers.

Summary

This video explains the importance of app security, differentiating between building an app and securing it. It highlights that AI-generated code doesn't automatically ensure security and advises developers to hide sensitive information like passwords and API keys using environment variables or secret managers, and to implement proper user authentication and authorization.

Structure

1App is coded, time to deploy.
2Security is crucial, not automatic.
3Analogy: Building a house without locks.
4Secrets to hide: passwords, API keys, connection strings.
5Methods: environment variables, secret managers.
6Authentication and authorization are key.

Original caption

Vibe coding: How to secure your app 🔐 #vibecoding #appsecurity #ai #artificialintelligence #vibecoder #lovable #base44 #cursor #claude

More from @sarguchi

Product placement

The video discusses app security in general, using the concept of 'Vibe Coding' as a framework. The creator's personal website, which focuses on building with AI, is linked as the product.

On-screen text

coded finally deploy you AI so making and SECURE completely DIFFERENT things this build has walls a roof and forgot forgot to install LOCKS on the doors security foundation so make HIDE YOUR SECRETS needs passwords API keys and database connection strings are VISIBLE in your code them environment variables or secret ensure authenticating users checking authentication app using ANYONE can access some methods username and password login oAuth JWT tokens once want user AUTHORIZATIONS implement role based sure VALIDATE EVERYTHING type and users break things in code scripts or security one you as

Transcript

My vibe coded app is finally done. Time to deploy. Stop! Did you secure your app? AI wrote the code, so it should be secure. Making your app work and making it secure are two completely different things. Think of it like this: AI helps you build a house. It has walls, a roof, and windows. But you forgot to install locks on the doors. Security should be the foundation of your app. So how do you do that? Make sure you hide your secrets. Your app needs passwords, API keys, and database connection strings. If these are visible in your code, anyone can use them. Use environment variables or secret managers. Ensure authenticating users. It's like checking ID at the door. Without authentication, your app doesn't know who's using it. Anyone can access some things. Some methods are username and password login, OAuth, like signing in with Google, and JWT tokens. Once you authenticate, you want to make sure the user has the right authorizations. Implement role based access. Make sure you validate and sanitize everything. Users can type in anything and malicious users will try to break things in code or scripts. Security isn't one time thing. You have to think about it as you build.