# Hide meeting id password from web browser source - Web SDK

**URL:** <https://devforum.zoom.us/t/hide-meeting-id-password-from-web-browser-source-web-sdk/33038>\
**Category:** Web\
**Created:** [October 13, 2020, 10:50am UTC](https://devforum.zoom.us/t/hide-meeting-id-password-from-web-browser-source-web-sdk/33038 "2020-10-13T10:50:57Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![namrata](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/namrata/32/9533_2.png) [@namrata](https://devforum.zoom.us/u/namrata)\
**Post date:** [October 13, 2020, 10:50am UTC](https://devforum.zoom.us/t/hide-meeting-id-password-from-web-browser-source-web-sdk/33038/1 "2020-10-13T10:50:57Z")

</div>

Hello Team,

We are using Zoom Web SDK in our web application. For security reasons, we want to hide the “MeetingId”, “Password”, “APIKey”, and “Signature”. The problem is that all participants can view this information in page source. Please help me with this.

I searched here and found the following article with Solved status.

> [@Hide meeting ID and Password in Web SDK](https://devforum.zoom.us/t/hide-meeting-id-and-password-in-web-sdk/22625):
>
> Description Is there any way we can prevent a user from getting the meeting ID and password by doing Inspect Element? The Meeting ID and Password is fetched from API endpoint and users can see that. Does the Web SDK provide with something like that? For example, what if we could provide all the details in a hashed key like signature? We don’t want our users to leak the meeting ID and password through the Web SDK.

But the above solution is not working for me.

**Which version?**  
1.8.1

**Screenshots**

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/8/1/81c90e4e4854959ba263cf210e3f30a0a2cef182.png)

**Smartphone (please complete the following information):**

- Browser:[All web browsers]

---

<div class="post-metadata">

**Author:** ![gagandeep.singh](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gagandeep.singh/32/11284_2.png) [@gagandeep.singh](https://devforum.zoom.us/u/gagandeep.singh)\
**Post date:** [October 13, 2020, 1:46pm UTC](https://devforum.zoom.us/t/hide-meeting-id-password-from-web-browser-source-web-sdk/33038/2 "2020-10-13T13:46:08Z")

</div>

Below are few of the way you can archive this

- **Disable right click** : But still there will be different ways to view the source code.

- **Generate signature from backend** : Zoom always recommend to generate signature from back end. refer [here](https://marketplace.zoom.us/docs/sdk/native-sdks/web/build/signature) Through this your password will not displayed in client side which is i guess a positive thing 😉

- Encrypt all the info in client side

- Use object instead of variable in javascript

You can consider all the above point but i still suggest you to take the advise from zoom developer support team.

---

<div class="post-metadata">

**Author:** ![namrata](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/namrata/32/9533_2.png) [@namrata](https://devforum.zoom.us/u/namrata)\
**Post date:** [October 13, 2020, 2:54pm UTC](https://devforum.zoom.us/t/hide-meeting-id-password-from-web-browser-source-web-sdk/33038/3 "2020-10-13T14:54:16Z")

</div>

Thanks for your reply.

Right-click disable is not useful people can still view the source.

I am not generating signature client side, the server it passing it to the view. Password is required for “[ZoomMtg.join](https://zoom.github.io/sample-app-web/ZoomMtg.html#join)”, can you please explain more about how the password will not display? If without password if possible then I can manage if other properties are visible. The urgency is to hide the password.

I will definatly consider your suggestions.

Thanks again.

---

<div class="post-metadata">

**Author:** ![gagandeep.singh](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gagandeep.singh/32/11284_2.png) [@gagandeep.singh](https://devforum.zoom.us/u/gagandeep.singh)\
**Post date:** [October 13, 2020, 3:23pm UTC](https://devforum.zoom.us/t/hide-meeting-id-password-from-web-browser-source-web-sdk/33038/4 "2020-10-13T15:23:07Z")

</div>

yeah, we have to pass the password in meeting.join()

I am not sure how you are implementing but if you are fetching [meeting detail through api](https://marketplace.zoom.us/docs/api-reference/zoom-api/meetings/meeting) then you can use encrypted password property.

---

<div class="post-metadata">

**Author:** ![namrata](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/namrata/32/9533_2.png) [@namrata](https://devforum.zoom.us/u/namrata)\
**Post date:** [October 13, 2020, 3:40pm UTC](https://devforum.zoom.us/t/hide-meeting-id-password-from-web-browser-source-web-sdk/33038/5 "2020-10-13T15:40:29Z")

</div>

I have encrypted passwords, but users can also use them to join meetings.

> [Error - Zoom](https://us02web.zoom.us/j/%7BMeetingId%7D?pwd=%7BEncryptedPassword%7D)

I think I should start exploring your 3rd and 4th point. If you have any helpful article or post then please share.

Thanks.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [October 14, 2020, 7:06pm UTC](https://devforum.zoom.us/t/hide-meeting-id-password-from-web-browser-source-web-sdk/33038/6 "2020-10-14T19:06:23Z")

</div>

Hey @namrata, @gagandeep.singh,

Here is another related thread for you to follow:

> [@Hide meeting number/password](https://devforum.zoom.us/t/hide-meeting-number-password/28734):
>
> Description Hi, I would like to prevent users from seeing the meeting id once logged in. In the View Source of meeting.js, a user can see the meeting number. Can this be hidden in any way, so that meeting.html uses the signature only to let people log in? The signature is created using the meeting\_number already as an input to it, so meeting.js should not be required to pass Meeting Number in again. [Screen Shot 2020-09-01 at 12.08.08]

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [November 14, 2020, 5:06am UTC](https://devforum.zoom.us/t/hide-meeting-id-password-from-web-browser-source-web-sdk/33038/7 "2020-11-14T05:06:26Z")

</div>

Closed on November 14, 2020, 5:06am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
