SSupabaseHelp Center

Guide

Create Secret Key

4 stepsAgent View (JSON)

Overview

Supabase provides fine-grained API key management to control which application components can access your project's data and services. Secret API keys are intended for server-side use and provide first-layer protection for your project. Creating a new secret key allows you to generate additional credentials for different applications, environments, or team members while maintaining security and auditability. This is essential when you need to authenticate requests from backend services, microservices, or third-party integrations that require exclusive access credentials.

Before you begin

  • Active Supabase account at supabase.com (free tier or paid)
  • Access to a Supabase project (you must have owner or admin role)
  • Logged into the Supabase dashboard

Step by step

1
ClickNew secret key

Navigate to the API keys section of your Supabase project and click the 'New secret key' button to initiate the creation of a new secret API key.

Tip. API keys are typically found in your project's Settings > API section. If you don't see the button, ensure you have admin or owner permissions on the project.
Step 1
2
TypeExample: my_super_secret_key_123

Enter a descriptive name for your new secret key in the text input field. Use a name that clearly identifies the key's purpose and environment (e.g., 'production_backend_key' or 'mobile_service_key').

Tip. Choose naming conventions that make it easy to identify and manage multiple keys. Include the environment (prod, staging, dev) and intended use in the name.
3
ClickCreate API key

Click the 'Create API key' button to generate the new secret key.

Tip. After clicking this button, the system will generate a unique secret key. Have a secure location ready (password manager, .env file, secrets vault) where you can immediately store the key value.
Step 3
4
Clickbutton

Confirm or close the success dialog by clicking the displayed button to complete the key creation process.

Tip. This dialog typically contains the generated secret key value displayed in full. If a 'Copy' button is available, use it to safely copy the key to your clipboard rather than manually selecting and copying text.
Warning. This is your only opportunity to view and copy the complete secret key. After closing this dialog, the key value will not be displayed again for security reasons. If you close without copying, you will need to delete this key and create a new one.
Step 4

Confirm it worked

  1. 1A confirmation dialog or success message appears after clicking 'Create API key'
  2. 2The new secret key is displayed on screen (typically shown once for copy/paste)
  3. 3The new key appears in your project's API Keys list or settings page
  4. 4You can see the key name you entered in the list of active API keys

Common issues

Keep reading

How to Generate a Secure JWT Secret Key in Node.js | by Ayesha Iftikhar | Medium

How to Generate a Secure JWT Secret Key in Node.js | by Ayesha Iftikhar | Medium Sitemap Open in app Sign up Sign in Medium Logo Get app Write Search Sign up Sign in Mastodon # How to Gene

building.theatlantic.com

Creating a Customer Secret Key

Creating a Customer Secret Key You're viewing OCI IAM documentation for new tenancies in regions that have been updated to use identity domains. Was my region updated? ### Oracle Cloud Infrastructu

docs.oracle.com

Quick JWT Key Generation Guide | JWT Secrets Blog

Quick JWT Key Generation Guide | JWT Secrets Blog FuntranslatorCreate Fun Language Translations Free 2024-01-158 min read # Quick JWT Key Generation Guide Learn how to quickly generate secure JWT

jwtsecrets.com