Thursday, 3 January 2019

Best Practice for storing API Keys?

I’m building a platform that is heavily integrated with other products. I have a “company profile” area in the application, where you’ll be able in input those API keys for the app to use. My question is, should I have these encrypted, salted or hashed or something inside of the database? Or is it sort of a non issue? One of the API keys will be to my customers quickbooks account, so I presume this would be something I want to have encrypted.Thanks

Submitted January 04, 2019 at 05:59AM by imanuglyperson

No comments:

Post a Comment