How can you secure sensitive information like API keys in a MERN stack app?

I want to make sure my MERN stack app is secure. What methods, such as using environment variables, encrypted storage, and secure communication protocols, can I use to protect sensitive data like API keys and credentials?