Step 6 · about 6 minutes
Find your API keys
Two values let your code reach the database. One is safe to ship; the other must never leave the dashboard.
Open Project Settings, then API. You will see the Project URL from step 2, and below it the keys.
- The publishable key — older projects call it anon — is designed to be in your app, where anyone can read it. It can only do what your security rules allow.
- The secret key — older projects call it service_role — ignores every security rule. It belongs on a server, in a settings page, never in code you push.
public/shots/sb-04-api-keys.png