Stripe api keys
- June 12, 2020 at 6:46 AM #568757
Hi on my website katerinastudio.com i have put to pay with stripe and if you go on the source code of the page or Ctrl + U on windows the api keys from stripe it appears. Is this normal? Sould be more secure? Thanks I send an screenshotJune 14, 2020 at 10:09 PM #569415
Stripe Support told me this
That said, I’ll be happy to help out! If you’re currently referring to our sample API codes in our API references or any Stripe documents that has the sample API code snippets then yes, it’s normal for the public key to appear. However, this shouldn’t apply to secret keys. The secret key shouldn’t be seen anywhere in our Stripe documents or API references. That should remain hidden because that’s your personal key.
Secret API keys should be kept confidential and only stored on your own servers. Your account’s secret API key can perform any API request to Stripe without restriction .
I hope this clarifies, let me know if you have any additional questions.
Mary MayJune 15, 2020 at 5:51 AM #569507June 15, 2020 at 10:57 PM #569844
And cause the secret api key is exposed someone can took do a intergration and make payments from me to him. Any suggestion how to hide or help me pls its importand.June 17, 2020 at 12:17 AM #570380
I assigned this issue to our developer and will give you a solution soon.June 17, 2020 at 2:07 AM #570413
ok thanks cause is a big issue i think for some random see my epi keys and took money from stripe or accept random transactions and not be from my website. thanks.June 18, 2020 at 9:53 PM #571125
Our developer is checking it and will give you a solution soon.June 28, 2020 at 10:22 PM #574361
we need more time to check it.
Really sorry for this delay.July 9, 2020 at 4:26 PM #578107
Please send us an FTP account, we’ll fix your site.
Thanks.July 9, 2020 at 6:03 PM #578177
Do you need ftp or you fix it cause i see some changes.
And if i send ftp do i need to make it like Set as private reply?July 9, 2020 at 11:00 PM #578318
Hi do you fix it? Can i disable the test mode?
And one more question why delete the plugin stripe from wordpress. What this mean?Is no longer supported or put new one?
ThanksJuly 10, 2020 at 5:05 AM #578398
We fixed that for your site, please check it.
– Yes, you can
Thanks.July 10, 2020 at 3:03 PM #578505
Ok thanks it works the seckret api key is hidden.Thanks
One more think why the stripe plugin is deleted from wordpress site what this mean?July 13, 2020 at 8:56 AM #579212
One more think why the stripe plugin is deleted from wordpress site what this mean?
– We are close plugin temporary to update security about stipe key like your site. We’ll publish again soon
Thanks.July 14, 2020 at 1:38 AM #579627
And just to remind you The stripe put new EU regulations and i ask the support what i need to do and answer me this:
If your integration relies on a plugin to create charges you might need to make changes in order to remain compliant with upcoming EU regulations. Ultimately, this depends on the developers that created the software. We have compiled a list of known Stripe integrations and information around their readiness, along with their relative documentation here:
If your plugin is not listed or is noted as not ready, I would suggest contacting them as soon as possible to ensure that they are updating their integration in preparation for these regulations.
Any update or somethink?
You can close the ticket.
You must be logged in to reply to this topic. You can click here