To optimize access credential management and increase security, we've enhanced the API keys experience. These updates are now available to all accounts.

We've grouped the new features into three categories to improve security, simplify administration, and increase visibility of your API keys.

Now, instead of viewing the new token directly when generating and renewing it, you will receive a single-access link. This change aims to increase security when sharing sensitive data and reduce the attack surface.

The single-access link can be copied for later access or shared with the person who needs to use it. The link can only be accessed once, as it expires when clicked. If there are no interactions within 24 hours, the link also expires.

The official URL for accessing the token always follows the format share.vtex.com/credentials/{token}. The {token} is a random identifier generated when the key is created or renewed. Check the link format before accessing it to avoid phishing attempts or malicious pages.

• API key export: Now you can generate an XLSX file containing information on both external API keys and the ones created in your account.

• Enhanced search feature: The API key list now supports searching by nickname in addition to the original key name.

• Token renewal: We've removed the Token duration column to simplify key management. The system now shows renewal alerts based on the configured period (3 or 6 months), while maintaining the token's validity.

  See below how alerts display in the API key row:

• Pending token deletion: We've added alerts to notify you when the deletion of an old token is pending after renewal.

We made these improvements to provide a more intuitive and complete experience for managing API keys, boosting operational security and efficiency.

The goal is to offer greater security and ease of use, including:

• Increased protection when sharing tokens, reducing the risk of accidental exposure.
• Streamlined collaboration between account management and development teams.

No action is needed. This update will be automatically applied to all accounts.

See the updated documentation to explore all features:

• API keys
• External keys
• Generated keys
• Configuring alerts to renew API tokens
• Exporting API keys
• Renewing API tokens