diff --git a/zod_bank/settings.py b/zod_bank/settings.py
index 84191b0..c8b85a6 100644
--- a/zod_bank/settings.py
+++ b/zod_bank/settings.py
@@ -30,11 +30,9 @@ BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
 # See https://docs.djangoproject.com/en/3.0/howto/deployment/checklist/
 
 # SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = '-pb+8w#)6qsh+w&tr+q$tholf7=54v%05e^9!lneiqqgtddg6q'
-
+SECRET_KEY = os.getenv('SECRET_KEY')
 # SECURITY WARNING: don't run with debug turned on in production!
-DEBUG = True
-
+DEBUG = os.getenv('DEBUG')
 # allow all host
 ALLOWED_HOSTS = ['*']