> ## Documentation Index
> Fetch the complete documentation index at: https://cloudinary.com/documentation/llms.txt
> Use this file to discover all available pages before exploring further.

# Where do I find my API key and API secret credentials?

If you're a user with a **Master admin**, **Admin**, or **Technical admin** role, you can find your API keys and other credentials on the [API Keys](https://console.cloudinary.com/app/settings/api-keys) page of the Cloudinary Console Settings:

![Cloudinary API keys and credentials](https://cloudinary-res.cloudinary.com/image/upload/q_auto/f_auto/bo_1px_solid_grey/docs/api_key_credentials_settings.png "thumb: dpr_2,w_650, with_code:false, with_url:false, width:650, popup:true")

> **TIP**:
>
> :title=Tips:

> * Watch a [video tutorial](finding_your_credentials_tutorial) on how to find and work with your Cloudinary credentials

> * The initial creator of a new account always starts with a **Master admin** role. If you have multiple users in your account, there must always be at least one user in the account with that role. For more details, see [Role-based permissions](dam_admin_users_groups#role_based_permissions).

These credentials include your: 

* **Cloud Name**: The product environment identifier. Required for configuring front-end SDKs and included as an identifer in all media asset URLs delivered from Cloudinary.
* **API Key** and **API Secret**: Needed to configure backend [SDKs](cloudinary_sdks) or to directly run [REST API requests](cloudinary_references). 
* **API environment variable**: A string that combines all three credential values. Copy the **API environment variable** format from the [API Keys](https://console.cloudinary.com/app/settings/api-keys) page of the Cloudinary Console Settings. Replace`<your_api_key>` and `<your_api_secret>` with your actual values, while your cloud name is already correctly included in the format.

If you need only your cloud name, such as for configuring a frontend SDK, you can find that on the [Dashboard](https://console.cloudinary.com/app/home/dashboard).

> **INFO**:
>
> :multi-line

> * You use your **cloud name** and **API key** for enabling or configuring a variety of Cloudinary features. As mentioned above, your cloud name is also a part of every media asset URL you deliver from Cloudinary. There's no problem to expose these values in client-side code.

> * You use your **API secret** for authentication. You should **never** expose Your API secret in client-side code or in any other way outside your organization.

> * Your cloud name, API key, and API secret are all specific to a [product environment](solution_overview#what_39_s_a_product_environment). Free accounts have only one product environment. Paid accounts can have multiple product environments that you can use for things such as production and staging environments, or you might have different product environments to parallel different products, websites, organizations, geographies, or apps that you use with Cloudinary.

#### Managing product environment API keys

You can manage your API keys in the [API Keys](https://console.cloudinary.com/app/settings/api-keys) page of the Console Settings, including adding, activating, disabling, and naming API keys. 

> **NOTE**: Cloudinary is developing a new role-based permissions system that will provide more flexible and comprehensive control over API key permissions. This will enable you to configure specific permissions for individual API keys, controlling access to Upload and Admin API methods. This feature isn't yet available for production use.

If you're interested in trying this solution in a test environment, contact your Customer Success Manager or [support](https://support.cloudinary.com/hc/en-us/requests/new) to learn more.

#### Managing API keys with the Provisioning API

[Enterprise](https://cloudinary.com/pricing) accounts that have the [Provisioning API](provisioning_api) enabled can use it to programmatically create and manage API keys using the `access_keys` endpoint and product environments using the `subaccounts` endpoint, as well as users and user groups. To use the Provisioning API, you need a dedicated API key. If your account includes support for the Provisioning API, you can find your credentials in the [Account API Keys](https://console.cloudinary.com/app/settings/account-api-keys) page of the Cloudinary Console Settings. &nbsp;
> **NOTE**: :no-title

**&larr; View all [Onboarding FAQ questions](developer_onboarding_faq)**