I built a vibe-coded app with planted keys. Here's what leaks from the outside and how to fix it.

Description and use

<p>AI tools make it easy to ship an app in an afternoon. They also make it easy to ship your secret keys along with it. I wanted to see exactly what a stranger can learn about an app using nothing but a browser, so I built a small leaky app on purpose and looked at it from the outside.</p> <p>The app is called Leaky Notes, and it lives at <a href="https://cheqvo-leaky-demo.vercel.app" rel="noopener noreferrer">https://cheqvo-leaky-demo.vercel.app</a>. <strong>Every key in it is fake.</strong> They are random strings in the right format, and none of them work. Please use this post to check your

Problem

<p>AI tools make it easy to ship an app in an afternoon. They also make it easy to ship your secret keys along with it. I wanted to see exactly what a stranger can learn about an app using nothing but a browser, so I built a small leaky app on purpose and looked at it from the outside.</p> <p>The app is called Leaky Notes, and it lives at <a href="https://cheqvo-leaky-demo.vercel.app" rel="noopener noreferrer">https://cheqvo-leaky-demo.vercel.app</a>. <strong>Every key in it is fake.</strong> They are random strings in the right format, and none of them work. Please use this post to check your

Outcome

<p>AI tools make it easy to ship an app in an afternoon. They also make it easy to ship your secret keys along with it. I wanted to see exactly what a stranger can learn about an app using nothing but a browser, so I built a small leaky app on purpose and looked at it from the outside.</p> <p>The app is called Leaky Notes, and it lives at <a href="https://cheqvo-leaky-demo.vercel.app" rel="noopener noreferrer">https://cheqvo-leaky-demo.vercel.app</a>. <strong>Every key in it is fake.</strong> They are random strings in the right format, and none of them work. Please use this post to check your

Evidence

I built a vibe-coded app with planted keys. Here's what leaks from the outside and how to fix it.

Source