Best Practice for API Keys and Security

by Mark Waddingham on June 27, 2022 1 comment

The question of security when using API Keys is something that comes up fairly often, so I thought it would be useful to write a blog post covering what I believe to be best practice when using these keys.

I have come across three kinds of API key in practice:

 1) API keys intended to be used from web pages (in client-side code)

 2) API keys intended to be used in deployed apps

 3) API keys intended to be used for doing secure things

read more
Mark WaddinghamBest Practice for API Keys and Security