---
# System prepended metadata

title: Why is it important for our production databases to have passwords that are kept secret?

---

# Why is it important for our production databases to have passwords that are kept secret?
![mad](https://media1.giphy.com/media/DBfYJqH5AokgM/giphy.gif)

---

### Malware infecting a database server can be a serious problem. The result may be loss of data, loss of access to the database, or loss of control of the database server’s hardware.

![??](https://i.gifer.com/6E2k.gif)

---

### Gitignored Files and Environment Variables (The 12-Factor App Methodology) - popularized the idea of getting secrets out of source control and instead storing them in the environment. On servers, this means environment variables. In development, it usually means gitignored .env files, yaml files, or something similar.

![party](https://julien.danjou.info/content/images/2019/11/tumblr_ma0id4kYlv1rv5x9bo1_400.gif)


---

### Benefits:
* It’s a lot better than storing secrets in code. Instead of coupling production secrets access to codebase access, it gets coupled to production server access, which makes much more sense.
* It’s flexible and works well with platform-as-a-service (PaaS) providers like Heroku.

---

## How can we keep our data secure?
* Use strong passwords.
* Back up your data.
* Be wary of suspicious emails.
* Install anti-virus and malware protection.
* Secure Wi-Fi.
* No one sends secrets over email or Slack.
* Don't leave paperwork or laptops unattended.
