API keys
Create an API key for a third-party tool. Learn who can create one, what it can open, and how to remove it.
- Projects
- ProductionArchive
- Updated
An API key lets a third-party tool use your Mnemonica account. The tool uses the key in place of you. You create the key, and you can remove it in a strong session.
What an API key is
- Belongs to you. A key belongs to your account, not to one Project.
- Counts as strong. A tool with your key can open Strong Projects that you can open.
- Has no unlock. Nobody enters a fingerprint, a face or a PIN when the tool uses the key. Anybody who has the key can use it.
- Does not expire. A key works until you remove it.
If somebody steals your key, that person can open every Strong Project that you can open, until you remove the key. To remove a key, you need a strong session. If you have none, a reset deletes all your keys. Give the key only to a tool that you trust.
Create an API key
You need a strong session to create a key.
Open the Security page
Open Preferences / Security. Select the API keys and devices tab.
Create the key
Click Create an API key. In API key name, type a name that tells you which tool uses it. Click Create.
Copy the key
Mnemonica shows the key one time. Copy it and put it in the tool. You cannot read it again.
Mnemonica keeps only a hashed form of the key. If you lose the key, remove it and create a new one.
Check and remove a key
The API keys and devices tab of Preferences / Security lists your keys. For each key, it shows the name, the Prefix (the first characters of the key) and the Kind. It also shows when the key was created and last used. The list includes the keys of your Mnemonica app (kind App) and of your Mnemonica Gate (kind Gate).
To remove a key, click the options button (⋮) on its row. Choose Revoke. To change the name of a key, choose Rename in the same menu. Remove a key that you do not use.
Revoke all API keys also removes the keys of your Mnemonica app and your Gates. They stop working until you link them again.
To remove all your keys at once, click the options button (⋮) in the header of the list. Choose Revoke all API keys.
You need a strong session to remove a key or change its name.
After a long time without use, Mnemonica reminds you about the key or suspends it.
API keys and a reset
A reset deletes all your API keys, together with your passkeys and the keys of the Mnemonica app. The tools that used them stop working at once.
During the 24 hours of the reset, you cannot create a key. When the 24 hours end, add a strong method. Then create new keys and put them in your tools.
Related articles
Preferences panel
Open the Preferences page to edit your profile, security, integrations and contacts.
Basic and strong sessions
Learn what basic and strong sessions are, how you protect your first device, how you make your other sessions strong, and what to do if you lose a device.
Pairing the Gate with browsers
Pair Mnemonica Gate with your browser using a 6-digit code, check the pairing status, and fix a Gate that cannot connect.
Add a device
Get a strong session on a new computer, browser, phone or tablet. A device that is already strong approves the new one.