Loading player...

Stop Sharing Secret Keys in Discord - OpenClaw setup

546 views
2
1
March 6, 2026
beginnerapi-securityenvironment-variablesnotionopenclaw-setupsecret-managementdotenv-fileapi-keys

Summary

This tutorial demonstrates the secure method for storing API keys and secrets when working with OpenClaw and Notion integrations. Instead of the common but risky practice of sharing secret keys directly in messaging platforms like Discord or WhatsApp, the video walks through the proper approach of storing sensitive credentials in environment variables using a .env file. The presenter shows how to open the .env file, add a Notion API key using the format 'notion_API_key=' followed by the internal integration secret, and save the file using standard text editor commands (Ctrl+X, then confirming the save). While the presenter displays their actual secret key during the demonstration, they note it will be deleted immediately after recording for security purposes. Once the API key is securely stored in the .env file, the tutorial continues by showing how to connect this stored credential to a specific Notion database. Using the example of a 'BingX Trade Journal' database, the video demonstrates navigating to the database settings in the top right corner, accessing the connections menu where it initially shows 'no connections', scrolling through available API integrations to find the newly created API key by name, and finally clicking 'connect' to establish the link between OpenClaw and the Notion database. This workflow ensures that sensitive credentials remain protected in local environment files rather than being exposed in chat histories or shared channels where they could be compromised. The approach is fundamental to secure development practices and essential for anyone working with API integrations across multiple platforms.