Get your Fintoc account's secret key and public key

Locate and copy your secret key and public key from the Fintoc dashboard for test and live modes.

🚧

Warning

Never send your secret key to the frontend. Access Fintoc endpoints only through your backend, so that your secret key never reaches the client.

To use the Fintoc API, you need your secret key. To instantiate the Fintoc widget, you need your public key. To retrieve either API key, open the dashboard.

In the dashboard, open the API keys page:

By default, you see live mode. To switch, use the mode toggle to select test mode:

If you are using the test environment, use the API keys shown in test mode. Otherwise, use the API keys shown in live mode.

You can see your API keys by pressing the little eye button beside them:

Some API keys start with sk_, and others start with pk_. Keys that start with sk_ are secret keys. Keys that start with pk_ are public keys.

🚧

You can only access your secret API key for live mode once

You can copy and view your secret key only when you activate or rotate it, so store it securely in your backend.

You can access both your public key and secret key for test mode at any time with the eye or copy buttons.

For live mode, you can always access the public key. The dashboard displays the secret key only when you activate or rotate it, so store it securely in your backend when the key appears.

We recommend you rotate your secret key for live mode at least once per year. To rotate the key, access the API keys section and click the three-dot menu on the right side of the table. You can schedule the rotation date or rotate it immediately: