API Design · Junior · Question 33 of 75

What is an API key typically used for?

✓Correct answer: Identifying the calling application or project for quotas and access, often server-to-server
2Encrypting the response
3Replacing HTTPS

Explanation

API keys identify clients but aren't user authentication. Keep them out of front-end code and rotate them when leaked.

Further reading

Test yourself

Take the API Design · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.