Hard coding secure bits of information such as API keys or secrets, database credentials, or other passwords into your project is a very insecure practice. Should anyone gain access to your project or where you version control your code, they'll then have access to any credentials stored too. Environment variables provide a solution to this project, by setting these variables in your environment you take away that insecurity. This tutorial shows how to use environment variables in your Go project, whether they be stored in the system or an uncommitted ".env" file, you're improving the security.