Encrypting scripts for developers

Ok, so this is what I need help with.

I want to encrypt something in a script from a developer so a developer is not able to get it, but I don’t know-how. Any suggestions?

Below is an example of what I mean:
I have an important password for a bot and I don’t want any developer but me to get it but it’s in a script so any developer can just go into the script and find it. I don’t want this to happen so I want to encrypt it.

2 Likes

You could just change every letter to a number using a website.

1 Like

Obfuscation is the term you are looking for.

But why are you holding sensitive information in a public script?

2 Likes

As I know of, there isn’t a way to lock a script such as on Google Sheets you can lock a sheet to only a specific person can edit it.

So you are holding an API key in a script. Are you working in a team create with other developers? This question sounds entirely conjectural.

3 Likes

Yes and No, I am working with a developer and I just want the Key for only me to view and not any other developer so they don’t have access to it but I also want to to be safe so I can leave studio and not wake up the next morning to see that my bot got hacked.

1 Like

You shouldn’t instantly assume the developers are going to be malicious. If you can’t trust your developers then you might as well work by yourself.

If you can’t trust them they won’t be able to trust you. If there is no trust your team is going to crumble.

3 Likes

Yes but there is always a risk. I know there is a risk as I saw this happen the other day in a group that I will not say.

Agree with @sjr04, you are already trusting your devs with full game access, why wouldn’t you trust them with access to a bot?

2 Likes

Cause the bot can have access to the whole group’s database and the scripter was only hired to script for the group and not to develop the bot.

If you don’t trust your devs with the key to the bot, then you shouldn’t trust them with access to the production game. Allow them to edit a private place, but, only allow yourself access to the production game, and include the API key there. There’s no way to “encrypt” a script to hide the key. Remember, obfuscation is NOT security.

3 Likes

I stopped typing a lengthy reply because jrelvas’ suggestion is exactly what I was going recommend, put more succinctly. I do what he suggests, I’m the only one with edit access to the live game place, and all our development and building is done in team create sandboxes.