I followed this tutorial here http://www.albertgao.xyz/2018/12/15/how-to-add-official-google-sign-in-to-your-react-application/
How can I safely store the api key? I have read some instructions about using .env folder, but you can view them with devtools.
I know with other API keys, we can store them on the server. However, I'm not sure how I can do this for Google Sign-In