The most fundamental rule: .env files should never be committed to version control. Use .env.example files with placeholder values as templates for developers:
Use Gmail's OAuth 2.0 for authorization. This approach provides secure, delegated access to Gmail without sharing passwords. dbpassword+filetype+env+gmail+top