diff --git a/backend-server/package-lock.json b/backend-server/package-lock.json
index a3e3da7..5087f57 100644
--- a/backend-server/package-lock.json
+++ b/backend-server/package-lock.json
@@ -12,6 +12,7 @@
         "bcrypt": "^5.1.1",
         "cors": "^2.8.5",
         "crypto": "^1.0.1",
+        "dotenv": "^16.4.5",
         "express": "^4.21.1",
         "mongoose": "^8.8.2"
       },
@@ -630,6 +631,18 @@
         "node": ">=0.3.1"
       }
     },
+    "node_modules/dotenv": {
+      "version": "16.4.5",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.4.5.tgz",
+      "integrity": "sha512-ZmdL2rui+eB2YwhsWzjInR8LldtZHGDoQ1ugH85ppHKwpUHL7j7rN0Ti9NCnGiQbhaZ11FpR+7ao1dNsmduNUg==",
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
+      }
+    },
     "node_modules/ee-first": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
diff --git a/backend-server/package.json b/backend-server/package.json
index 9328b53..7110a7a 100644
--- a/backend-server/package.json
+++ b/backend-server/package.json
@@ -16,6 +16,7 @@
     "bcrypt": "^5.1.1",
     "cors": "^2.8.5",
     "crypto": "^1.0.1",
+    "dotenv": "^16.4.5",
     "express": "^4.21.1",
     "mongoose": "^8.8.2"
   },
diff --git a/backend-server/src/.env b/backend-server/src/.env
new file mode 100644
index 0000000..b7a1079
--- /dev/null
+++ b/backend-server/src/.env
@@ -0,0 +1,2 @@
+MONGO_URI=mongodb://jutsujen:f%40!ry-T%40!l@118.67.213.117:27017/navigatorDB?authSource=admin
+PASS_PHASE=18b1e091097da0eac9764f65dea470bf6a46b3f3fb693627a11cff8353efb007
diff --git a/backend-server/src/index.ts b/backend-server/src/index.ts
index 11b6ebf..09d584e 100644
--- a/backend-server/src/index.ts
+++ b/backend-server/src/index.ts
@@ -5,15 +5,16 @@ import {vols} from "../../src/app/backup"
 import {all_tools} from "../../src/app/urls"
 import crypto from "crypto";
 import bcrypt from "bcrypt"
+import dotenv from "dotenv";
+
 
 const app = express()
 
+dotenv.config()
 app.use(express.json())
 app.use(cors())
 
-const MONGO_URI = 'mongodb://jutsujen:f%40!ry-T%40!l@118.67.213.117:27017/navigatorDB?authSource=admin'
-
-mongoose.connect(MONGO_URI).then(()=>{console.log("Connected")}).catch((err)=>console.log(err))
+mongoose.connect(process.env.MONGO_URI!).then(()=>{console.log("Connected")}).catch((err)=>console.log(err))
 
 const headerSchema = new mongoose.Schema({
     headerName: String
@@ -164,7 +165,7 @@ app.post("/api/update/delete", async(req,res)=>{
     const deleteTask = await UpdateModel.findOneAndUpdate({_id: id},{deleted: true}).then(()=>res.status(201).json({message: "Deleted Successfully"})).catch((err)=>res.status(500).send(err))
 })
 
-const passPhase = "18b1e091097da0eac9764f65dea470bf6a46b3f3fb693627a11cff8353efb007";
+const passPhase = process.env.PASS_PHASE!;
 const secretKey = crypto.createHash('sha256').update(passPhase).digest();
 
 function encryptPassword(password: string){