> ## Documentation Index
> Fetch the complete documentation index at: https://razorpay-60c89f9a-mintlify-audit-missing-sections-1778528421.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.
# API Keys
> API keys are unique identifiers that let you securely connect your application to Razorpay's services. An API key is a combination of the `key_id` and `key_secret`, which are required to make any API request to Razorpay. You will need to add this API key to your code as part of your integration process, ensuring secure access to Razorpay's payment services while protecting your data. Essentially, API keys act like passwords for your app, providing safe access to Razorpay's payment and other services while protecting your data.
**Watch Out!**
To generate API keys in **Live Mode**, you must provide the website details where you will collect payments. If you do not have the option to generate API keys in **Live Mode**. It may be because you are yet to provide your website details. We collect website information during the onboarding process.
* If you have not shared your website yet, please [follow the steps to add your website details](/payments/dashboard/account-settings/business-website-details). We will verify your website within 3 working days. Once the verification is complete, you can generate API keys in **Live Mode**.
* If you have already shared your website details, and they have been verified, you can find the details on your Dashboard. Navigate to **Account & Settings** → **Website and app settings**.
* You can generate API keys in **Test Mode** without adding a website.
If you still encounter issues, log in to the Dashboard and raise a request with our support team.
## Generate API Keys
Follow these steps to generate API keys:
Watch this video to see how to generate API keys in the Test mode.
Watch this video to see how to generate API keys in the Live mode.
Log in to your Dashboard with the appropriate credentials.
Select the mode (**Test** or **Live**) for which you want to generate the API key.
* **Test Mode**: The test mode is a simulation mode that you can use to test your integration flow. **Your customers will not be able to make payments in this mode**.
* **Live Mode**: When your integration is complete, switch to live mode and generate live mode API keys. In the integration, **replace test mode keys with live mode keys to accept customer payments**.
Navigate to **Account & Settings** → **API Keys** (under **Website and app settings**) → **Generate Key** to generate key for the selected mode.
**Watch Out!**
* After generating the keys from the Dashboard, download and save them securely. You can use only one set of API keys. If you do not remember your API keys, you must [regenerate them](/payments/dashboard/account-settings/api-keys#regenerate-api-keys) from the Dashboard and update them wherever the previous keys were used for payment gateway integrations.
* API Keys are universal; that is, they are applicable to all websites and apps that you have whitelisted for your Merchant ID.
* **Do not share your API Key secret** with anyone or on any public platforms. **This can pose security threats to your Razorpay account**.
* Once you generate the API Keys, only the **Key Id** is visible on the Dashboard, **not the Key secret**, as it can pose security threats to your Razorpay account.
* Use the **Live API Keys** to accept live payments and the **Test API Keys** for test transactions.
## Regenerate API Keys
You also have the option to regenerate the key if required.
**Two-Factor Authentication**
To regenerate API keys, you must validate your identity via OTP and send it to your registered mobile number. However, this step is skipped if you already performed OTP validation while logging in to the Dashboard.
If you have not set up two-factor authentication, you will be prompted to verify your mobile number before regenerating keys.
To regenerate API key:
1. Log in to the Dashboard.
2. Select the mode from the menu ribbon for which you want to generate the API key.
3. Navigate to **Account & Settings** → **API Keys** (under **Website and app settings**) → **Generate new key** to generate key for the selected mode.
This allows you to deactivate the old key immediately or within 24 hours.
## Frequently Asked Questions (FAQs)
### Common
### 1. Can I generate multiple API keys if I have only one MID?
No, if you have only one MID, you can generate only one API key.
### 2. Can I generate multiple API keys if I have multiple MIDs?
Yes, you can generate one API key for each MID if you have multiple MIDs.
### 3. Can I use my existing API key when expanding to new Razorpay platforms?
Yes, if your existing API key is saved, you can continue using the same keys as you expand to new platforms.
### 4. What should I do if I do not have the previous API key saved?
If you do not have the previous API key saved, you must [regenerate new API keys](#regenerate-api-keys) and relaunch all previous products or apps with the updated keys.
### 5. My account is activated but I cannot generate API keys as my website is not verified. What do I do?
Website details are required to generate API keys. If you do not have the option to generate API keys, it may be because website details are yet to be provided. If you have not shared your website yet, please [follow the steps to add your website details](/payments/dashboard/account-settings/business-website-details). We will verify your website within 3 working days, and once the verification is complete, you can generate API keys.
### 6. Why am I unable to generate the API keys?
Your website or app link must be verified to generate an API key. This step ensures that only verified sources (website/app) can collect payments through the payment gateway.
### 7. Who has access to the API Keys?
Only users with the **Owner** or **Admin** role have access to the API keys. Know more about [standard user roles & permissions](/payments/dashboard/account-settings/manage-team#standard-user-roles).
### 8. Can I use the same Razorpay API Keys on multiple websites or domains?
Yes, you can use the same set of Live Mode API Keys on multiple websites or domains.
The Live Mode keys are tied to your single Razorpay account, allowing them to process live transactions from any domain where they are implemented. Using the same keys on a new website **will not impact** the live payments running on your existing, whitelisted website.
**For Testing:**
We strongly recommend using your **Test Mode API Keys** when integrating Razorpay on any new website. Test payments are simulated and ensure that your live payment processing on existing sites remains unaffected during development.
**Watch Out!**
Ensure your new website's domain is whitelisted in your Razorpay account to avoid payment disruptions once you switch to Live Mode.
### Shopify
### 1. Do I need API keys to integrate a payment app with Shopify?
No, API keys are not required to integrate a payment app with Shopify. OAuth is to handle the authentication process.
### 2. Why am I being asked for an API key while integrating with Shopify?
If you are integrating a non-payment app with Shopify, only the API key is required and not the key\_secret. However, Shopify does not require API keys to integrate payment apps.
### 3. I am unable to access case\_key while integrating with Shopify. How can I access the `case_key`?
Only users with admin role access can access the `case_key`.
### 4. Can I use the same Razorpay API Keys on multiple websites or domains?
Yes, you can use the same set of Live Mode API Keys on multiple websites or domains.
The Live Mode keys are tied to your single Razorpay account, allowing them to process live transactions from any domain where they are implemented. Using the same keys on a new website **will not impact** the live payments running on your existing, whitelisted website.
**For Testing:**
We strongly recommend using your **Test Mode API Keys** when integrating Razorpay on any new website. Test payments are simulated and ensure that your live payment processing on existing sites remains unaffected during development.
**Watch Out!**
Ensure your new website's domain is whitelisted in your Razorpay account to avoid payment disruptions once you switch to Live Mode.
### 5. How should I manage API Keys when working with a developer for integration?
API Keys are generated and managed by the **Owner or Admin** roles in the Dashboard. Razorpay does not offer a separate Developer Access Role.
To securely facilitate integration and testing (for example, for platforms like WooCommerce, where direct API key input might be required for some plugins), follow this standard workflow:
* **Phase 1: Testing (Integration)**
The Owner or Admin must **generate and securely share** the **Test Mode API Keys** with the developer. The developer will use these keys to build and test the integration without affecting any live payments.
* **Phase 2: Go-Live**
Once testing is complete, the Owner or Admin must generate the **Live Mode API Keys** and provide them to the developer to replace the Test Keys in the final application setup.
This ensures security and maintains clear control over your live payment environment.
### Related Information
* [API Best Practices](/api/best-practices)
* [API Glossary](/api/glossary)
* [API Keys FAQ](/payments/dashboard/faqs#2-i-cannot-generate-live-mode-api-keys)