Stripe api keys

[giannis]

Hi on my website katerinastudio.com i have put to pay with stripe and if you go on the source code of the page or Ctrl + U on windows the api keys from stripe it appears. Is this normal? Sould be more secure? Thanks I send an screenshot

[giannis]

This reply has been marked as private.

[giannis]

Stripe Support told me this

Hi there,

That said, I’ll be happy to help out! If you’re currently referring to our sample API codes in our API references or any Stripe documents that has the sample API code snippets then yes, it’s normal for the public key to appear. However, this shouldn’t apply to secret keys. The secret key shouldn’t be seen anywhere in our Stripe documents or API references. That should remain hidden because that’s your personal key.

Secret API keys should be kept confidential and only stored on your own servers. Your account’s secret API key can perform any API request to Stripe without restriction [0].

I hope this clarifies, let me know if you have any additional questions.

Best regards,
Mary May

[anna_thimpress]

Hi,

Can you give me your wp-admin, using access information?

I’ll help you check it.

Look forward to hearing from you.

[giannis]

This reply has been marked as private.

[giannis]

And cause the secret api key is exposed someone can took do a intergration and make payments from me to him. Any suggestion how to hide or help me pls its importand.

[anna_thimpress]

Hi,

I assigned this issue to our developer and will give you a solution soon.

[giannis]

ok thanks cause is a big issue i think for some random see my epi keys and took money from stripe or accept random transactions and not be from my website. thanks.

[anna_thimpress]

Hi,

Our developer is checking it and will give you a solution soon.

[giannis]

Hi
Any news from the developer?
Thanks

[anna_thimpress]

Hi,

we need more time to check it.

Really sorry for this delay.

[giannis]

Hi

Any news?

Thanks

[Isaac Lewis]

Hi giannis,

Please send us an FTP account, we’ll fix your site.

Thanks.

[giannis]

Hi

Do you need ftp or you fix it cause i see some changes.

Thanks.

And if i send ftp do i need to make it like Set as private reply?

[giannis]

This reply has been marked as private.

[giannis]

Hi do you fix it? Can i disable the test mode?
And one more question why delete the plugin stripe from wordpress. What this mean?Is no longer supported or put new one?
Thanks

[giannis]

And i see on the Autoptimize Settings plugin you disable Optimize JavaScript Code can i enable?

[Isaac Lewis]

Hi giannis,

We fixed that for your site, please check it.

And i see on the Autoptimize Settings plugin you disable Optimize JavaScript Code can i enable?

– Yes, you can

Thanks.

[giannis]

Ok thanks it works the seckret api key is hidden.Thanks

One more think why the stripe plugin is deleted from wordpress site what this mean?

[Isaac Lewis]

Hi,

One more think why the stripe plugin is deleted from wordpress site what this mean?
– We are close plugin temporary to update security about stipe key like your site. We’ll publish again soon

Thanks.

[giannis]

And just to remind you The stripe put new EU regulations and i ask the support what i need to do and answer me this:

If your integration relies on a plugin to create charges you might need to make changes in order to remain compliant with upcoming EU regulations. Ultimately, this depends on the developers that created the software. We have compiled a list of known Stripe integrations and information around their readiness, along with their relative documentation here:

https://stripe.com/partners/sca-ready

If your plugin is not listed or is noted as not ready, I would suggest contacting them as soon as possible to ensure that they are updating their integration in preparation for these regulations.

Any update or somethink?
You can close the ticket.

Thanks

[Isaac Lewis]

Hi giannis,

Yes, we’ll contact them if possible.

Thanks.

[Author]

Posts