我如何安全地防止用户在我的脚本中获取字符串？

Question

If I was to give a python script to someone to run, they would have to run it with an API key to allow access to the server. Is there any way I can prevent them from seeing the key but still be able to use it.

Answer 1

If you really need to protect this key, then you need to treat it as a password.

There are various ways of doing this:

Securely storing passwords for use in python script has 3 answers:

• use bcrypt
• use pbkdf2
• and some homebrew method

I need to securely store a username and password in Python, what are my options? has 7 answers:

• homebrew RAM only method
• use keyring
• use cryptography
• use pbkdf2
• and 3 more homebrew methods