// blog

Writing

On secrets, zero-knowledge encryption, and shipping with a team.

Jun 2026 · 5 min

Your AI coding tools are reading your .env

Cursor, Copilot and friends read files off disk. .gitignore stops commits — not reads. Here's how to keep secrets off disk entirely.

Jun 2026 · 4 min

Stop sharing .env files over Slack

The default way teams share secrets is also the most dangerous. A look at why — and what to do instead.