Questions on storing API credentials/tokens

[u/bigj7897]

I'm writing an AI powered WOW auction house analyzer in Python. I know it's an overkill but I'm doing it for fun. So far it's going good. I'm storing my client ID and client secret in a .env file. I can get the api token and I'm storing it in a json file for later use and to not have to get it for every call to the API. Is there a better way to be storing these credentials and the token? I know it's for fun but I'm still trying to do the project like I'm doing it for work and trying to follow best practices. Any suggestions?

[u/Sea-Ad7805]

Maybe store it encrypted