> ## Documentation Index
> Fetch the complete documentation index at: https://docs.fintoc.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Get your Fintoc account's secret key and public key
Locate and copy your secret key and public key from the Fintoc dashboard for `test` and `live` modes.
**Warning**
Never send your secret key to the frontend. Access Fintoc endpoints only through your backend, so that your secret key never reaches the client.
To use the Fintoc API, you need your secret key. To instantiate the Fintoc widget, you need your public key. To retrieve either API key, open [the dashboard](https://dashboard.fintoc.com/).
In the dashboard, open the API keys page:
By default, you see `live` mode. To switch, use the mode toggle to select `test` mode:
If you are using the [test environment](/docs/resources/test-mode), use the API keys shown in `test` mode. Otherwise, use the API keys shown in `live` mode.
You can see your API keys by pressing the little *eye* button beside them:
Some API keys start with `sk_`, and others start with `pk_`. Keys that start with `sk_` are secret keys. Keys that start with `pk_` are public keys.
**You can only access your secret API key for `live` mode once**
You can copy and view your secret key only when you activate or rotate it, so store it securely in your backend.
You can access both your public key and secret key for `test` mode at any time with the *eye* or *copy* buttons.
For `live` mode, you can always access the public key. The dashboard displays the secret key only when you activate or rotate it, so store it securely in your backend when the key appears.
We recommend you rotate your secret key for `live` mode at least once per year. To rotate the key, access the API keys section and click the three-dot menu on the right side of the table. You can schedule the rotation date or rotate it immediately:
