# Web SDK Security - APP Key+Secret

**URL:** <https://devforum.zoom.us/t/web-sdk-security-app-key-secret/9443>\
**Category:** Web\
**Created:** [March 24, 2020, 1:23pm UTC](https://devforum.zoom.us/t/web-sdk-security-app-key-secret/9443 "2020-03-24T13:23:22Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sharon](https://avatars.discourse-cdn.com/v4/letter/s/67e7ee/32.png) [@sharon](https://devforum.zoom.us/u/sharon)\
**Post date:** [March 24, 2020, 1:23pm UTC](https://devforum.zoom.us/t/web-sdk-security-app-key-secret/9443/1 "2020-03-24T13:23:22Z")

</div>

Hey,  
i am using the web SDK, but as i see, the app key and secret must exist in client side for using zoom tags and objects.

i afraid from security issues - i don’t what can happen if somebody will steal the app key and secret - maybe he can create a lot of webinars or something like that?

please advise me how i can solve this issue?  
i am using React(Javascript) FrontEnd.

---

<div class="post-metadata">

**Author:** ![michael\_p.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael_p.zoom/32/18105_2.png) [@michael\_p.zoom](https://devforum.zoom.us/u/michael_p.zoom)\
**Post date:** [March 24, 2020, 2:42pm UTC](https://devforum.zoom.us/t/web-sdk-security-app-key-secret/9443/2 "2020-03-24T14:42:58Z")

</div>

Hi @sharon,

Thanks for reaching out. Actually, the Web SDK sample app code is not to be used in production as is, it’s supposed to get you quickly setup locally.  
You will need to generate a signature using your API Key/Secret stored on the backend and then pass the signature to Zoom.init function on the frontend to start the meeting. Here are some sample codes to help you generate a signature[1].

1 - [https://marketplace.zoom.us/docs/sdk/native-sdks/web/essential/signature](https://marketplace.zoom.us/docs/sdk/native-sdks/web/essential/signature)

Let us know if you have any other questions.

Thanks

---

<div class="post-metadata">

**Author:** ![sharon](https://avatars.discourse-cdn.com/v4/letter/s/67e7ee/32.png) [@sharon](https://devforum.zoom.us/u/sharon)\
**Post date:** [March 25, 2020, 2:45pm UTC](https://devforum.zoom.us/t/web-sdk-security-app-key-secret/9443/3 "2020-03-25T14:45:52Z")

</div>

Hey,  
Thank you very much.  
it make sense, we will try it.

Thanks a lot!

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [March 25, 2020, 8:03pm UTC](https://devforum.zoom.us/t/web-sdk-security-app-key-secret/9443/4 "2020-03-25T20:03:16Z")

</div>

Let us know if you have additional questions! 🙂

-Tommy

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 7:36pm UTC](https://devforum.zoom.us/t/web-sdk-security-app-key-secret/9443/5 "2020-08-21T19:36:29Z")

</div>

Closed on August 21, 2020, 7:36pm UTC


