Discord Bot Environment Variables & .env Guide
Learn how to keep bot tokens, API keys and database credentials outside your public source code.
Discord bots often require secrets such as a bot token, database password or third-party API key. Environment variables separate those values from application source code and make deployments easier to manage safely.
What is an environment variable?
An environment variable is a value provided to the running process by its environment. The application reads the value at runtime instead of requiring the secret to be written directly into source code.
Common Discord bot variables
Variable names depend on your code, but common examples include credentials and configuration values.
DISCORD_TOKEN=...
DATABASE_URL=...
API_KEY=...
NODE_ENV=productionUsing .env files
.env files are commonly used during development. They should not be published to source repositories or shared publicly when they contain secrets.
What if a token is leaked?
Regenerate the compromised credential through the appropriate provider and update the hosting secret. Removing it from a message later does not make the old secret safe again.
Frequently Asked Questions
Should my Discord token be in GitHub?
No. Keep authentication credentials out of public repositories.
Can environment variables contain database passwords?
Yes. They are commonly used to provide application credentials at runtime.
Why is process.env.DISCORD_TOKEN undefined?
The variable may not be defined in the environment, may use a different name, or may not have been loaded by your development configuration.