- IMPORTANT web3.storage and nft.storage API keys are not really secret. Any API key must be an environment variable in server-side code. Any react alternative will include the key in the build and be visible to anyone. See https://create-react-app.dev/docs/adding-custom-environment-variables/