Is it a bad idea to change SECRET_KEY in a Django project every time the server is restarted?

Question

Django

Many sources say that storing SECRET_KEY in environment variables is one of the best approaches. But the variables set by the user are stored there only until the next reboot of the environment if you set them directly: Is it a bad idea to change SECRET_KEY every time the server is restarted? The project requires the ability to run on different machines, by different users without having to write SECRET_KEY by hand. os.environ['SECRET_KEY'] = 'some_string'

Answer 1

Bad. All tokens and signatures where it is used will become invalid . Of the frequently used ones, these are password reset tokens.