What should I do if my API key is compromised?

If you believe your API key has been exposed or misused, you should take action immediately to secure your account.

Steps to secure your account

• Revoke the compromised API key
  Go to your Runware dashboard and disable or delete the API key that may have been exposed.

• Generate a new API key
  Create a new key and update your applications or services to use the new key.

• Review your usage activity
  Check your usage logs and billing activity to identify any unexpected or unauthorized requests.

• Contact support if needed
  If you notice suspicious activity or unexpected charges, contact the Runware support team for assistance.

Best practices to prevent API key exposure

To keep your API keys secure:

• Store keys in secure environment variables, not directly in code

• Avoid sharing keys in public repositories or client-side applications

• Rotate API keys regularly

• Revoke keys that are no longer in use