What is a API key?

A long secret code that lets one piece of software use another, like a password for programs.

Integrations between your tools (payments to accounting, bookings to email) use API keys. A key in the wrong hands can read or move data without anyone logging in. Keys are often pasted into plugins, spreadsheets and chats and forgotten.

This service keeps the operator's keys sealed in its own database; it never asks you for your tool passwords.

What to do

Keep keys in a password manager, not a document.
Revoke keys when a staff member or integrator leaves.
Use the minimum permission a key needs.