> ## Documentation Index
> Fetch the complete documentation index at: https://docs.fintoc.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Get your secret and public API keys
Locate and copy your secret key and public key from the Fintoc dashboard for `test` and `live` modes.
Never send your secret key to the frontend. Make requests that use your secret key only from your backend so the key never reaches the client.
To use the Fintoc API, you need your secret key. To instantiate the Fintoc widget, you need your public key. To manage your API keys, open [the dashboard](https://dashboard.fintoc.com/).
In the dashboard, open the API keys page:
By default, you see `live` mode. To switch, use the mode toggle to select `test` mode:
If you are using the [test environment](/guides/resources/test-mode), use the API keys shown in `test` mode. Otherwise, use the API keys shown in `live` mode.
When an API key is available, select the *eye* button beside it to reveal the key:
Secret keys start with `sk_`. Public keys start with `pk_`.
**The dashboard shows your `live` secret key only during activation or rotation**
You can copy and view your secret key only when you activate or rotate it, so store it securely in your backend.
You can access both your public key and secret key for `test` mode at any time with the *eye* or *copy* buttons.
For `live` mode, you can always access the public key. The dashboard displays the secret key only when you activate or rotate it, so store it securely in your backend when the key appears.
We recommend that you rotate your secret key for `live` mode at least once per year. Open the API keys page, then select the three-dot menu on the right side of the table. You can schedule the rotation or rotate the key immediately:
