Skip to main content
You will work with two primary types of API keys: Atomd Keys and Provider Keys.

Atomd Site Key

Your Atomd dashboard provides a single Site Key. This key is used on your frontend to display the Widget and uniquely identify your account. To prevent unauthorized use of your Atomd requests, you must restrict your Site Key to specific domains. Keep in mind that domain matching is exact: subdomain.example.com is treated differently than example.com. You must explicitly add both to your dashboard if you intend to use the widget on both.

Provider API Keys

Each supported provider utilizes two types of API keys:
  • Site/Public Key: Used on the frontend for identification purposes.
  • Secret Key: Used on the backend to verify and authenticate requests.
Security Note: As the name implies, you must never share your Secret Key or expose it in your client-side code.
Atomd securely stores your provider keys and utilizes them when executing requests through the Widget or Challenge Pages. In the next pages, you will find instructions on how to obtain API keys for specific providers.