Vallkey
/Quick start

Get started

Quick start

Protect your first API key in five minutes.

  1. Create an account at app.vallkey.com with your email or GitHub, choose where your data lives, and add a passkey for fast, phishing-proof sign-in.
  2. Click New key, choose the provider, paste your real secret key and review the rules. Start with a test key.
  3. Copy the ghost key. It is shown only once.
  4. Put the ghost key in your app's environment instead of the real key, and point the provider's SDK at api.vallkey.com as shown below.
  5. Deploy, then remove the real key from everywhere else it was stored: CI variables, old .env files, shared notes.

Note

Your app talks to https://api.vallkey.com with the ghost key. We check the request against the key's rules, replace the ghost key with the real one, and forward it to the provider. The response comes straight back.

Still have a question?

We read every email, usually within a day.

Contact support