Does two-factor authentication protect my API keys?

Two-factor authentication protects signing in to your account and sensitive actions. API keys are separate credentials for code: a request with a valid key and the matching Account ID doesn't ask for a 2FA code.

So:

• Keep keys out of front-end code, public repos and screenshots.
• Give each key only the permissions it needs.
• Revoke a leaked key in the Console immediately.

Because creating keys happens in a signed-in Console session, 2FA does make it harder for someone to create new keys on your account.

Still need help?#

• Email support@clatterlabs.com or team@clatterlabs.xyz.
• Questions about our infrastructure, or permanent deletion of your data (your whole account or one service): infrastructure@clatterlabs.xyz.

We usually reply within the first hour, and always within 24 hours.