If you’re working on a project where you’ll be sharing code with someone else, particularly if you’re keeping the source code in a public repository, you’re going to want to make sure that sensitive data is separate from your project. This includes things like API keys, tokens for services and perhaps passwords or other similar data.