Security & Privacy
API key
A secret string used to authenticate software when it calls an external API.
Example
An application uses a secret API key to prove it may call a paid model service.
Why it matters
It lets software connect to a service without a person signing in for every request.
You'll hear it
“Disable that key; it was included in the shared file.”
Can you control it?
Sometimes
Sometimes. Some products or workflows let you influence an API key, while others keep it fixed or manage it automatically. Check the settings and documentation for the tool you are using.
Common questions
- Can someone else use a copied key?
- Often, yes. A valid key may grant access to whoever presents it.
- Does a key always identify a particular person?
- No. It may identify an application, project or account instead.
- Can a valid key still fail to complete a request?
- Yes. Permissions, usage limits or unavailable services can prevent the action.