# Best Practice On API Key and Secret

**URL:** <https://devforum.zoom.us/t/best-practice-on-api-key-and-secret/4326>\
**Category:** API and Webhooks\
**Created:** [May 21, 2019, 10:58am UTC](https://devforum.zoom.us/t/best-practice-on-api-key-and-secret/4326 "2019-05-21T10:58:51Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![subhadra.ponnada](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@subhadra.ponnada](https://devforum.zoom.us/u/subhadra.ponnada)\
**Post date:** [May 21, 2019, 10:58am UTC](https://devforum.zoom.us/t/best-practice-on-api-key-and-secret/4326/1 "2019-05-21T10:58:51Z")

</div>

I would like to know the best practice with respect to API Key and Secret usage… Currently, we have one key and secret pair which we use in local and lower environments to test…

As we are planning to move to production soon, can we use the same key and secret there as well or would it be good to have for a seperate key and secret for production environment. If seperate key-secret pair is good to have then please let us know how to get that.

Thanks

---

<div class="post-metadata">

**Author:** ![michael.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael.zoom/32/37213_2.png) [@michael.zoom](https://devforum.zoom.us/u/michael.zoom)\
**Post date:** [May 21, 2019, 2:17pm UTC](https://devforum.zoom.us/t/best-practice-on-api-key-and-secret/4326/2 "2019-05-21T14:17:33Z")

</div>

Hi @subhadra.ponnada, important question to ask! We’re happy to advise. We provide and require two different sets of credentials for development and production. Here is our documentation on App Credentials, with an example of where you will find Production Credentials within your developer account: [https://devepmp.zoomdev.us/docs/guides/about-marketplace/building-connectors-and-apps#app-credentials-and-redirect-url](https://devepmp.zoomdev.us/docs/guides/about-marketplace/building-connectors-and-apps#app-credentials-and-redirect-url) .

Let us know if we can provide any further help on this. Since you’re planning on moving to production soon, I’ll also recommend checking out our Submission Checklist: [https://devepmp.zoomdev.us/docs/guides/app-submission-and-management/testing-and-submitting-your-app/submission-checklist](https://devepmp.zoomdev.us/docs/guides/app-submission-and-management/testing-and-submitting-your-app/submission-checklist)

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 6:18pm UTC](https://devforum.zoom.us/t/best-practice-on-api-key-and-secret/4326/3 "2020-08-21T18:18:31Z")

</div>

Closed on August 21, 2020, 6:18pm UTC