4 ms·
If it's got to be shown in plain text to the user then it must not be a one-way hash. HTTPS everywhere, let your users regenerate their API keys at will.
by zacharydanger 15y ago
If it's got to be shown in plain text to the user then it must not be a one-way hash.
HTTPS everywhere, let your users regenerate their API keys at will.