# API Keys (/docs/api-keys)



Manage API keys in the [dashboard](/dashboard/api-keys). Use a separate key for each application and environment.

## Create a key [#create-a-key]

Select **New key**, then give it a name such as `checkout-production`.
Copy the secret into your server’s `EVENTLAYER_KEY` environment variable.
The secret is shown only once.

<DashboardScreenshot src="/docs/dashboard/api-keys.jpg" alt="API Keys management page in the Eventlayer dashboard" caption="Create and manage your application’s keys in the dashboard." />

## Rotate a key [#rotate-a-key]

1. Create a replacement key in the dashboard.
2. Update your application’s server environment and deploy it.
3. Confirm requests work, then delete the old key.

## Revoke a key [#revoke-a-key]

Delete it from **API Keys** in the dashboard. Requests using that key will receive
`401 Unauthorized`. If a key is lost or exposed, replace it.

See [authentication](/docs/authentication) to use your key in the SDK or HTTP requests.