Help get this topic noticed by sharing it on
Twitter,
Facebook, or email.
Twitter,
Facebook, or email.
Where can I find my API key?
Where can I find my API key? I've searched dev area docs, and this help site, to no avail.
Promoted
Response
-
I think this is very bad by design to let people use the same passsword as they login to the account on the site. You should either let us set a API key of our own or generate a long hash key automatically.
-
EMPLOYEE
1Your api key is the password you use to login to our website. All the api calls take your username / password combination exactly as if you were trying to login to the website. Assuming you've got an account with SendGrid and you've forgotten your password you can contact anyone from support and have them either send you a password reset email, or just have them set it manually. -
-
I think this is very bad by design to let people use the same passsword as they login to the account on the site. You should either let us set a API key of our own or generate a long hash key automatically.
-
Totally agree
-
-
WOW. Very bad.
-
-
-
-
-
EMPLOYEE
2Hello,
I apologize for the delayed response. We are currently monitoring this site much more heavily.
You are correct. This is a bad design and should be altered. Thank you for your feedback on this issue. I will submit this with our developers and point out this flaw in our system.
Thank you for your patience regarding this issue.
Ryan -
-
-
-
Ditto, been wandering around the site for 45 minutes trying to remember/find where to change the API key.
-
-
+1, FWIW. I just broke our mailer when doing a routine web password change. That's not good.
-
-
-
-
So what is the plan to correct this serious issue? It was acknowledged as an issue and a "Flaw" over nine months ago. When will it be corrected?
-
-
Yup, this is an idiotic design decision. And really? Is it that hard to change?
-
-
It'd be really helpful if we could uncouple the password form API calls, clients who insist on setting a new password once we've set them up on Sendgrid than invariably break the integration.
-
-
Any updates on this? The documentation states that the username/password are still required URL parameters for API requests...
I'm a bit shocked to learn that a service of SendGrid's stature is using passwords in URLs. Even more unsettling, they've known about the problem for a year and (apparently) still haven't fixed it. -
Loading Profile...








