# Safe to use API Key in client side code? **URL:** \ **Category:** Web\ **Tags:** faq\ **Created:** [October 26, 2021, 8:06pm UTC](https://devforum.zoom.us/t/safe-to-use-api-key-in-client-side-code/59412 "2021-10-26T20:06:40Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![mattmcd](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mattmcd/32/31750_2.png) [@mattmcd](https://devforum.zoom.us/u/mattmcd)\ **Post date:** [October 26, 2021, 8:06pm UTC](https://devforum.zoom.us/t/safe-to-use-api-key-in-client-side-code/59412/1 "2021-10-26T20:06:40Z")
**Description** Want to make entirely sure that it’s okay to expose our JWT app API Key through client-side operations (usage in web SDK) and that no encryption is needed. I know the API Secret should absolutely not be exposed, but I couldn’t see it anywhere specified whether the same was true for API Key. ---
**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\ **Post date:** [October 27, 2021, 10:54pm UTC](https://devforum.zoom.us/t/safe-to-use-api-key-in-client-side-code/59412/2 "2021-10-27T22:54:01Z")
Hey @mattmcd, Thank you for reaching out to the Zoom Developer Forum. Good question! It is indeed safe for you to expose your API Key in the Client-Side code of your application. As you noted, it’s the API Secret that you’ll want to secure through encryption when you provide a signature to the Client-Side. Thanks, Max ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\ **Post date:** [November 27, 2021, 8:54am UTC](https://devforum.zoom.us/t/safe-to-use-api-key-in-client-side-code/59412/3 "2021-11-27T08:54:26Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.