API key restrictions

Question

Hello.

We care about the security of the API User credentials and API-calls and have a question:
is it possible somehow in Wallee to specify which IP addresses can use the API key?

If there is no such a possibility should we encrypt the API-Key and the UserId to store in a database?

Answer 1

Thank you for your question.

It is not possible to specifiy which IP address can use the API key, but since the key can only be generated within your account which is protected via your password and perhaps two-factor authentication it is very much safe.

I would suggest to only generate it which will cause a pop up wiht the key. copy and paste it and close the key. This way the API key is only visible within Wallee itself.