
#2136-Encrypt & Mask AI Key on Dashboard
The Dreamaholic
The AI key should be securely encrypted instead of being displayed in plain text on the dashboard. Currently, the key is directly visible and can be easily copied or misused, which poses a security risk. The system must ensure that the AI key is stored in an encrypted format in the database and only a masked version (e.g., sk-xxxxxxx...
) is shown on the dashboard. Access to view or copy the full key should be restricted to authorized users only, with proper permissions and confirmation steps. This will help protect sensitive credentials, prevent unauthorized use, and maintain compliance with security best practices.