steve34chen | Stripe Developers | Page 1

spring trellisBOT May 23, 2023, 9:47 PM

#

mellow bobcat May 23, 2023, 9:47 PM

#

@coral stream How can I help?

coral stream May 23, 2023, 9:50 PM

#

Hi, I noticed that when I generate the stripe payment element, the stripe api will show my client secret key, how can I hide it or encrypt ?

#

mellow bobcat May 23, 2023, 9:51 PM

#

Ah, so there's a difference between a client secret (which is what's in your screenshots above) and a secret key (which looks like sk_test_123... or sk_live_123...)

#

Your secret key should never be shared, as anyone who has access to it can make API requests on your account

#

The client secret, however, is safe to expose. There's no real harm that someone can do to your account with the client secret only.

coral stream May 23, 2023, 9:53 PM

#

I see, thank you for your explanation

#

so stripe publishable api key can also be exposed right?

mellow bobcat May 23, 2023, 10:00 PM

#

yes, that's okay, too

#steve34chen