Vercel now redacts Sensitive Environment Variable values from build logs

Vercel build logs now automatically replace Sensitive Environment Variable values of 32 characters or longer with [REDACTED], closing a common accidental-secret-leak path in CI output (2026-07-09).

What it means If you deploy on Vercel, one of the easiest ways to leak a key — echoing it in a build step — is now masked by default.