From 4a2fa5c076d54c8f8e1193b946cfd058ee194df6 Mon Sep 17 00:00:00 2001
From: devlikepro <waha@devlike.pro>
Date: Tue, 24 Jun 2025 18:20:17 +0700
Subject: [PATCH] [core] message about plain key

---
 src/core/auth/ApiKeyAuthFactory.ts | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/src/core/auth/ApiKeyAuthFactory.ts b/src/core/auth/ApiKeyAuthFactory.ts
index 315a7e33..6f8e2605 100644
--- a/src/core/auth/ApiKeyAuthFactory.ts
+++ b/src/core/auth/ApiKeyAuthFactory.ts
@@ -25,7 +25,13 @@ export function ApiKeyAuthFactory(
   setTimeout(() => {
     logger.warn('⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️');
     logger.warn(
-      'You are setting plain api key in WAHA_API_KEY (or WHATSAPP_API_KEY). Use hashed API key with "WAHA_API_KEY=sha512:{SHA512_HASH_FOR_YOUR_API_KEY}"️',
+      'WARNING: Plain text API key detected. This is a security risk.',
+    );
+    logger.warn(
+      'Your API key can be exposed in environment variables or process lists.',
+    );
+    logger.warn(
+      'For better security, use WAHA_API_KEY=sha512:{SHA512_HASH_FOR_YOUR_API_KEY}',
     );
     logger.warn('⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️');
   }, 2000);