Python Security Tips
5 min read
Python security: use parameterised queries for databases, the secrets module for generating tokens, bcrypt for passwords, and subprocess with a list instead of shell=True. Run pip audit to find vulnerabilities.
Security Best Practices
- Never hardcode secrets — use environment variables
- Use
secrets module for tokens, not random - Sanitize user inputs before database queries
- Use parameterized queries, never f-strings in SQL
- Keep dependencies updated:
pip audit - Hash passwords with
bcrypt or argon2, never MD5/SHA1