Secrets

How passwords, keys and tokens are protected.

Secret files are never read

.env and .env.*, *.pem, *.key, *.p12, *.pfx, id_rsa and other SSH keys, credentials.json, secrets.json/yml/toml, service account files, .npmrc, .pypirc, .netrc, .git-credentials, .htpasswd, *.tfstate, and everything in .ssh, .aws, .gnupg, .kube, .docker and .git. This rule is locked on.

Secrets inside normal files

Before a file is sent, values that look like API keys, tokens, passwords in connection strings and private keys are replaced with [hidden-1], [hidden-2]... When the changed file is written back, the real values are put back on your computer. The AI never sees them.

Add your own

In Settings > Permissions > Also never read these files, add one pattern per line, for example config/prod.yml or *.sqlite.

Your API keys in CodeStilt

If you add your own AI key (BYOK), it is encrypted on our server and only ever shown as its last few characters.