AES-256 Encrypted

API Key Security

Everything you need to know about how we handle and protect your access credentials for the PrivePDF ecosystem.

1. Key Generation

When you generate an API key through your dashboard, it is created using a cryptographically secure random number generator. Keys are unique to your account and never shared with any other user.

2. Storage Protocol

Your API keys are hashed using industry-standard algorithms (PBKDF2 with SHA-256) before being stored in our database. We do not store your raw API keys in plain text.

Important: You will only see the full API key once upon generation. Always store it securely in a secret manager.

3. Revocation

If you suspect that an API key has been compromised, you can revoke it instantly through the API Hub. Revoked keys are invalidated across our globally distributed edge nodes immediately.

4. Usage Limits

API keys carry specific usage quotas based on your subscription tier (PRO or LIFETIME). Usage is tracked in real-time, and metrics are available in your developer dashboard.