You want to use API tokens and other secrets within your team's Terraform workspaces.

In an HCP Terraform/Terraform Cloud variable, with the sensitive option checked.

In HashiCorp Vault.

In a terraform.tfvars file, securely managed and shared with your team.

In a terraform.tfvars file, checked into your version control system.

In a plaintext document on a shared drive.