.env.local !!top!! Direct
It is the standard place to store sensitive data like API keys , database credentials, or personal tokens that should never be pushed to a public repository.
Suppose you're building a web application that uses a third-party API. You can store the API key in .env.local : .env.local