How can I manage and hide secret keys and configs?

My plugin uses a couple of API keys that must be kept secret.

The solution I had in mind was using dotenv. However, I’m instead running into some errors which I can’t make much sense out of.

What should I do? Should I use setPluginData? Does dotenv even work for Figma Plugin development anyways?


The only safe way is to use the cloud (server or serverless functions) and then you can expose the required API and use it in your plugin.
The easiest way is to use firebase or vercel for this.

Noted, thank you so much!