Security•5 min • Basics

Managing API keys safely

Best practices for creating, rotating, and revoking API keys used with TG2G.

securityapi-keys

Updated recently

Creating keys

Create keys from **Portal → Settings → API**. Use descriptive names such as `prod-ingest-pipeline` or `staging-event-api-tests` so you can quickly identify where a key is used.

Rotating and revoking

Regularly rotate keys used in production pipelines.
Revoke keys immediately if you suspect they have been exposed.
Update any CI/CD secrets or infrastructure config that referenced the old key.