[Solved] Why hide a django secret key?

Question

If it’s just application run on local machine I don’t see reason to hide it, just make sure that user downloading your repo knows that SECRET_KEY is public, because if that person wants for some reason to have it publicly accessible it would pose risk to them.
Best thing to do is not to set SECRET_KEY at all, so when user wants to run your app they will have to set their own secret

Accepted Answer

If it’s just application run on local machine I don’t see reason to hide it, just make sure that user downloading your repo knows that SECRET_KEY is public, because if that person wants for some reason to have it publicly accessible it would pose risk to them.
Best thing to do is not to set SECRET_KEY at all, so when user wants to run your app they will have to set their own secret