Get Stripe API Keys: Test & Live (2026)

Why You Need Stripe API Keys

Stripe API keys are essential for connecting your website or application to Stripe's payment processing infrastructure. Whether you're building an e-commerce store, a SaaS subscription platform, or a simple donation page, you'll need both Test and Live keys to develop and deploy your integration.

Test keys let you simulate transactions without moving real money, while Live keys process actual payments. This guide walks you through retrieving both sets of keys from your Stripe Dashboard.

Step 1: Log in to Stripe

1. Go to dashboard.stripe.com
2. Sign in with your Stripe account credentials.
3. If you don't have an account yet, click "Sign up" to create one — it's free.

Step 2: Navigate to API Keys

Once you're in the Stripe Dashboard:

1. Look at the left sidebar and click "Developers".
2. Then click "API keys" from the submenu.

You'll now see a page listing your API keys. This is where you'll find both your Publishable key and Secret key.

Step 3: Retrieve Your Test Keys

Test keys allow you to simulate payments without processing real transactions. Here's how to get them:

1. At the top right of the dashboard, toggle "Test mode" to ON.
2. You will now see your test keys displayed:
   • Publishable key — the test-mode publishable key shown in your Dashboard
   • Secret key — the test-mode secret key shown behind the reveal control
3. Click "Reveal test key" to view the full Secret key.

Step 4: Retrieve Your Live Keys

Once you're ready for production, you'll need your Live keys to process real payments:

1. Turn Test mode OFF using the toggle at the top right.
2. You will now see your Live keys:
   • Publishable key — the live-mode publishable key shown in your Dashboard
   • Secret key — the live-mode secret key shown behind the reveal control
3. Click "Reveal live key" to view the full Secret key.

⚠️ Important Security Notes

Best Practices for API Key Security

• Store Secret Keys in environment variables, never in source code.
• Use Restricted API Keys in production environments to limit permissions.
• Rotate your keys periodically and revoke any that may have been compromised.
• Use Stripe's webhook signing secrets to verify incoming events.

Using Restricted API Keys (Recommended for Production)

For production environments, Stripe recommends creating Restricted API Keys instead of using your main Secret Key. Restricted keys let you control exactly which API resources the key can access.

1. Go to Developers → API keys in your Stripe Dashboard.
2. Click "Create restricted key".
3. Name your key (e.g., "Website Payments" or "Subscription Manager").
4. Select the specific permissions the key needs (Read, Write, or None for each resource).
5. Click "Create key" and copy it immediately — you won't be able to see it again.

Quick Reference: Key Types

Need Help?

If you'd like assistance retrieving your keys, setting up restricted keys, or configuring Stripe webhooks, the Hatty AI team is here to help.

We can also grant temporary access setup, walk you through webhook configuration, or build a complete Stripe integration for your platform.