Keep a development environment separate from production

Use isolated sample data and credentials. Document configuration requirements and provide a repeatable way to start the application.

Test important flows before release and keep a recoverable backup. Never put production secrets into a public repository or browser bundle.