Using curl with username and password can indeed be tricky when it comes to security. One way to avoid exposing sensitive info is to use environment variables. For example, you can set your username and password in your shell like this:
```bash
export API_USER="username"
export API_PASS="password"
```
Then use them in your curl command like this:
```bash
curl -u $API_USER:$API_PASS https://api.example.com
```
This way, your credentials aren’t stored in your command history.
Also, check out tools like `pass` or `1Password` CLI for managing sensitive data securely.
```bash
export API_USER="username"
export API_PASS="password"
```
Then use them in your curl command like this:
```bash
curl -u $API_USER:$API_PASS https://api.example.com
```
This way, your credentials aren’t stored in your command history.
Also, check out tools like `pass` or `1Password` CLI for managing sensitive data securely.