Managing API Keys
Secure credential management for AppDrift
Enterprise Security
Encrypted Storage
Critical Security Information
- Never share your API keys publicly or commit them to version control
- API keys provide full access to your app store accounts
- Rotate keys immediately if you suspect they've been compromised
Understanding API Keys
Apple Store Connect
Requires three components for authentication:
- Issuer ID: Your team identifier
- Key ID: Unique API key identifier
- Private Key: .p8 file for authentication
Google Play Console
Uses a service account with JSON key file:
- Service Account: Google Cloud identity
- JSON Key: Contains all credentials
- Permissions: Granted in Play Console
Adding API Keys to AppDrift
For iOS Apps
- 1
Navigate to your app settings
Go to Dashboard → Apps → Select your iOS app → Settings
- 2
Click "Credentials" tab
Find the API configuration section
- 3
Enter your credentials
69a6de96-xxxx-xxxx-xxxx-xxxxxxxxxxxxABCD123456 - 4
Verify and save
Click "Test Connection" to verify, then save
Viewing and Managing Keys
Current API Keys
Apple Store Connect - ProductionActive
Key ID:
••••••••••Created: January 15, 2024
Last used: 2 hours ago
Key Rotation Best Practices
Regular Key Rotation
Recommended Schedule
- Every 6 months: Routine rotation for security
- Immediately: If key exposure is suspected
- Team changes: When team members leave
Rotation Process
- 1Generate new keys in App Store Connect or Google Cloud
- 2Add new keys to AppDrift
- 3Test new keys are working
- 4Revoke old keys from store consoles
- 5Revoke old keys at their provider; contact AppDrift about stored copies.
Security Checklist
Need Help with API Keys?
Contact AppDrift for help with your connection. Do not include private keys or service account JSON in your message.