Security

API Key security is your responsibility. Follow these practices to keep keys safe.

Store and protect your key

Zwapgrid does not store your API Key after creation. Copy the key when it is shown and store it securely. Limit who has access to see or use the key.

Where not to use API Keys

Do not use API Keys in front-end code or anywhere the key could be exposed, including:

• Web browsers or client-side applications

• Public repositories or shared code

• Logs, URLs, or error messages

Use API Keys only in secure server-side or backend environments where the key cannot be exposed to end users or the public.

Refresh keys regularly

We encourage you to refresh your API Keys regularly as a security best practice. Create a new key, update your applications to use it, then delete the old key. See API Key Lifecycle for creating and deleting keys.

It is your responsibility to keep your API Keys safe.