Environment Variables or Secrets Not Available in Published Base44 App
Your Base44 app uses environment variables or secret keys (for API integrations, database connections, or third-party services), but these values are not available in the published version of the app. Features that depend on these variables work in the editor but fail in production.
This commonly manifests as API calls returning authentication errors, integrations silently failing, or features that depend on configuration values behaving differently in the published app.
Error Messages You Might See
Common Causes
- Environment variables were set in the editor or preview environment but not in the production deployment settings
- The variable names are slightly different between environments (typo or case difference)
- Secrets are being exposed in client-side code instead of being used in server-side functions only
- The app was re-published but the environment variables were not refreshed or re-deployed
How to Fix It
Check your Base44 app's deployment or environment settings to ensure all required variables are set for the production environment, not just the preview environment. Variable names must match exactly, including case.
Ensure that sensitive keys and secrets are only accessed in server-side code or functions. If they're referenced in client-side code, they may be stripped out during the build for security reasons.
For apps with many environment-dependent integrations, a developer can audit the configuration and ensure all variables are properly set and accessible in every environment.
Real developers can help you.
You don't need to be technical. Just describe what's wrong and a verified developer will handle the rest.
Get HelpFrequently Asked Questions
Why do my API keys work in Base44 preview but not when published?
Environment variables are often configured separately for preview and production. Check your deployment settings to ensure all variables are set for the production environment.
Are my API keys safe in Base44?
Only use secrets in server-side functions, never in client-side code. Client-side code is visible to users and may have secrets stripped during the build process.