Back to docs

Credentials

Public keys, secret keys, and rotation

Keys are the most important part of your setup. Public keys identify apps. Secret keys sign protected actions and must stay private.

Credentials

Public key

Use this in browser, mobile, and client SDK setup. It identifies your realtime app.

Credentials

Secret key

Keep this in trusted server code only. Never place it in browser or mobile apps.

Credentials

Secret preview

A masked hint that helps identify a secret without revealing the full value.

Credentials

Rotation

Generate a new key, copy the secret once, update your trusted server, then revoke the old key.