alt Hacker News> For those who do not want to paste OpenAIkeys to other peoples web pages
That should be everybody!
There are standard practices for delegating responsibility, never ever be pasting API keys into websites.
Replies
throwaway_19sz • yesterday at 1:14 PM
“Never ever” is crazy talk. Just put a couple of dollars in a prepaid account and assume it may all get used up. “Standard practices” won’t get you far in life.
Why? It's easy and predictable. Generate a key with a spend cap plus short expiry and you're set. I much prefer that to having to fork over my email with an OAuth flow.