# Not able to retrieve Host Key using /users API

**URL:** <https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898>\
**Category:** Users and Groups\
**Created:** [June 22, 2022, 8:04am UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898 "2022-06-22T08:04:12Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![multunus](https://avatars.discourse-cdn.com/v4/letter/m/f475e1/32.png) [@multunus](https://devforum.zoom.us/u/multunus)\
**Post date:** [June 22, 2022, 8:04am UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/1 "2022-06-22T08:04:12Z")

</div>

I am calling the List users (/users) API with include\_fields=host\_key param and the API is not returning the host\_key. It was working until y’day and stopped all of a sudden.

Tried the [Get User API](https://marketplace.zoom.us/docs/api-reference/zoom-api/methods#operation/user), but it also doesn’t give me host\_key either. The documentation says that it should provide the host\_key in the response.

Anything am missing. I am wondering what changes for it to stop working all of a sudden. And any idea when it will be resolved?

Thanks,

---

<div class="post-metadata">

**Author:** ![nand](https://avatars.discourse-cdn.com/v4/letter/n/bbce88/32.png) [@nand](https://devforum.zoom.us/u/nand)\
**Post date:** [June 22, 2022, 8:43am UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/2 "2022-06-22T08:43:57Z")

</div>

Hi!

Using the [https://api.zoom.us/v2/users/{userId}](https://api.zoom.us/v2/users/%7BuserId%7D) it used to work for us for months up until today.  
Since today, this API no longer returns the host\_key field.  
Was that a planned change, or is it a bug in the Zoom API that will be resolved soon?  
It breaks our current workflow.

Thank you.

Edit: Is it linked to the API update done 9 hours ago? [Changelog](https://marketplace.zoom.us/docs/guides/stay-up-to-date/changelog/)

---

<div class="post-metadata">

**Author:** ![nand](https://avatars.discourse-cdn.com/v4/letter/n/bbce88/32.png) [@nand](https://devforum.zoom.us/u/nand)\
**Post date:** [June 22, 2022, 2:23pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/3 "2022-06-22T14:23:00Z")

</div>

After an initial email with support, the response is “For security reasons, the host\_key is no longer returned”.

Ok but, as an ISV, I am creating zoom users on behalf of my users, and I forward them their host key, so that they can identify as host when using their phone.  
Right now I can no longer do that, and I had to switch to my fallback videoconference provider.

I am wondering what is the alternative to “host\_key” now?

Thanks.

Edit: I am continuing discussion with support privately, just sharing here infos for the initial poster and others.

---

<div class="post-metadata">

**Author:** ![michael.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael.zoom/32/37213_2.png) [@michael.zoom](https://devforum.zoom.us/u/michael.zoom)\
**Post date:** [June 22, 2022, 4:25pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/4 "2022-06-22T16:25:20Z")

</div>

@multunus and @nand , thanks for bringing this up, I’m sorry for the impact the change has caused. I can confirm this is in fact the current intended behavior after a change. We’re working to ensure feedback and use cases is taken into account and will share more information very soon.

@nand , I totally hear you on the ISV use case and the need to set the host key for your non-login users. We’re working on it, and will follow up shortly

---

<div class="post-metadata">

**Author:** ![sotelemed](https://avatars.discourse-cdn.com/v4/letter/s/ac91a4/32.png) [@sotelemed](https://devforum.zoom.us/u/sotelemed)\
**Post date:** [June 22, 2022, 4:43pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/5 "2022-06-22T16:43:22Z")

</div>

I am having this same issue, and require the host\_key for our workflow.  
Is there any update to this yet?

---

<div class="post-metadata">

**Author:** ![rdnoo](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rdnoo/32/38710_2.png) [@rdnoo](https://devforum.zoom.us/u/rdnoo)\
**Post date:** [June 22, 2022, 6:32pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/6 "2022-06-22T18:32:51Z")

</div>

Hi !

Same here, as ISV partner our zoom integration relies on that host\_key property. Is there any alternative to retrieve users host keys please ? Any other endpoint ?

Wouldn’t it have been better to address this earlier ? From previous posts, it looks like nobody knew the host key was about to be deleted/deprecated after this last API update. We are using it in most of our workflows and a few transactional emails.

I can understand it was done on purpose for security reasons. However, how should we address this with our customers / end-users now ?

Thanks

---

<div class="post-metadata">

**Author:** ![ksks](https://avatars.discourse-cdn.com/v4/letter/k/bc8723/32.png) [@ksks](https://devforum.zoom.us/u/ksks)\
**Post date:** [June 22, 2022, 6:45pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/7 "2022-06-22T18:45:24Z")

</div>

We also require the host key for our workflow.  
Please let us know a workaround as soon as possible.  
Thank you.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [June 22, 2022, 6:53pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/8 "2022-06-22T18:53:31Z")

</div>

Hi everyone! We are working on a fix for this issue!  
As soon as I have more information I will come back to you all!

---

<div class="post-metadata">

**Author:** ![sotelemed](https://avatars.discourse-cdn.com/v4/letter/s/ac91a4/32.png) [@sotelemed](https://devforum.zoom.us/u/sotelemed)\
**Post date:** [June 22, 2022, 6:55pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/9 "2022-06-22T18:55:14Z")

</div>

Thanks for keeping us updated.  
Do we have any information about this “fix”?  
Is the fix to have the API call return the host\_key field again, or will there be a different workaround?  
Do we have any kind of a timeline?

---

<div class="post-metadata">

**Author:** ![cdahms](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/cdahms/32/178_2.png) [@cdahms](https://devforum.zoom.us/u/cdahms)\
**Post date:** [June 22, 2022, 10:33pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/10 "2022-06-22T22:33:06Z")

</div>

I’ve been yelling at my zoom account rep, customer success manager and support about this issue.

This is an interesting response I got from support

“I’ve received confirmation from the engineering team that on June 21st they intentionally introduced a “breaking change” to the Zoom API. Service engineering has explained there will no longer be an option to us “GET” requests to access the host key. The engineering team has introduced this change as a security enhancement”

So in a nutshell, they intentionally introduced a breaking change without notifying customers, or announcing it or adding it to the developer changelog.

Fabulous coordination, bravo.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [June 22, 2022, 10:56pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/11 "2022-06-22T22:56:25Z")

</div>

Hi @sotelemed and @cdahms  
I really understand how you are feeling and we have addressed this issue.  
I can confirm with you that we have rolled back this change and you should be able to have access to the “host\_key” as you used to.

I will keep you posted on any changes and I will make sure to pass along your feedback to the appropriate team.  
Let me know if there is anything else I can do to support you

Best,  
Elisa

---

<div class="post-metadata">

**Author:** ![sotelemed](https://avatars.discourse-cdn.com/v4/letter/s/ac91a4/32.png) [@sotelemed](https://devforum.zoom.us/u/sotelemed)\
**Post date:** [June 22, 2022, 11:11pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/12 "2022-06-22T23:11:20Z")

</div>

Confirmed fixed! Thank You!

---

<div class="post-metadata">

**Author:** ![rdnoo](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rdnoo/32/38710_2.png) [@rdnoo](https://devforum.zoom.us/u/rdnoo)\
**Post date:** [June 23, 2022, 5:51am UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/13 "2022-06-23T05:51:18Z")

</div>

I can confirm that all related issues from yesterday are gone aswell. Thanks for following-up and thank you for the rollback!

---

<div class="post-metadata">

**Author:** ![bruce.felknor](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/bruce.felknor/32/50229_2.png) [@bruce.felknor](https://devforum.zoom.us/u/bruce.felknor)\
**Post date:** [July 6, 2022, 1:35pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/14 "2022-07-06T13:35:46Z")

</div>

I am experiencing a variant of this issue.

I created a list of all active users with both their host key and pmi, but about 30% were missing host key (and/or pmi).

I created a process that attempts to update the missing properties, calling GET User with the Zoom User Id. Out of ~500 records needing updates, occasionally 1 user record includes the properties, all the rest do not.

I don’t see a discernable pattern for success or failure.

No errors are being thrown by the api.

Any help or suggestions appreciated.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [July 6, 2022, 3:45pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/15 "2022-07-06T15:45:08Z")

</div>

Interesting @bruce.felknor  
Feel free to open up a ticket with support and I will debug this issue further

> **[Zoom Developer Support](https://devsupport.zoom.us/hc/en-us)**

Make sure to add a link to this thread and as much details that you can share with me so I can try and reproduce this issue

Best,  
Elisa

---

<div class="post-metadata">

**Author:** ![yarden](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/yarden/32/40799_2.png) [@yarden](https://devforum.zoom.us/u/yarden)\
**Post date:** [August 25, 2022, 3:28pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/16 "2022-08-25T15:28:54Z")

</div>

We are seeing this issue happening now, all of our host keys are not coming in anymore.

Any idea on how to fix?

---

<div class="post-metadata">

**Author:** ![iapelsinov](https://avatars.discourse-cdn.com/v4/letter/i/94ad74/32.png) [@iapelsinov](https://devforum.zoom.us/u/iapelsinov)\
**Post date:** [August 25, 2022, 4:16pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/17 "2022-08-25T16:16:25Z")

</div>

Hi. I’m seeing the same issue today.  
No host keys are turned for any meetings.

Is there a timeframe when this will be fixed or a permanent workaround?

Thanks,

---

<div class="post-metadata">

**Author:** ![shariq.torres](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/shariq.torres/32/39899_2.png) [@shariq.torres](https://devforum.zoom.us/u/shariq.torres)\
**Post date:** [August 25, 2022, 5:37pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/18 "2022-08-25T17:37:57Z")

</div>

Igor, this change was made due to a security concern. There are a few alternative workflows that you can try here: [Alternatives to using the `host_key`](https://devforum.zoom.us/t/alternatives-to-using-the-host-key/74422).

---

<div class="post-metadata">

**Author:** ![iapelsinov](https://avatars.discourse-cdn.com/v4/letter/i/94ad74/32.png) [@iapelsinov](https://devforum.zoom.us/u/iapelsinov)\
**Post date:** [August 25, 2022, 6:07pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/19 "2022-08-25T18:07:10Z")

</div>

Thank you for response Shariq.  
I’m going to check proposed workaround.

However, is there a newsletter I can subscribe to and find out these changes ahead of time?

Thanks

---

<div class="post-metadata">

**Author:** ![shariq.torres](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/shariq.torres/32/39899_2.png) [@shariq.torres](https://devforum.zoom.us/u/shariq.torres)\
**Post date:** [August 25, 2022, 9:41pm UTC](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898/20 "2022-08-25T21:41:17Z")

</div>

That is a good question, and we working on consolidating email system so that changes like this can be communicated. In the meantime, I would subscribe to the Changelog ([Changelog](https://marketplace.zoom.us/docs/guides/stay-up-to-date/changelog/)) and the developer newsletter ([https://developers.zoom.us/](https://developers.zoom.us/)).

[Next page](https://devforum.zoom.us/t/not-able-to-retrieve-host-key-using-users-api/70898.md?page=2)
