Sendzovo
Sign in Start building
Sign in Start building

API Key Security

Keep Sendzovo API keys and SMTP credentials safe: secure storage, credential separation and a production checklist.

API Base URL: https://api.sendzovo.com/v1

Protect credentials

Store API keys and SMTP credentials in secure server-side configuration.

Never expose secrets

Never expose Sendzovo credentials in browser JavaScript or public source repositories.

Use the right key

Use Sending API keys only for sending operations and Verification API keys only for verification.

API key storage

Store credentials in environment variables or a secure secret-management system rather than directly in application source code. 

SENDZOVO_SENDING_API_KEY=your_sending_api_key
SENDZOVO_VERIFICATION_API_KEY=your_verification_api_key

Production checklist

  • Sending domain is configured and ready for sending.
  • Required DNS records have been published.
  • Sending API key is associated with the intended domain.
  • Verification API key is stored separately from sending credentials.
  • API credentials are not committed to source control.
  • API exceptions and HTTP errors are handled by the application.
Credential separation

Sending API keys and SMTP credentials are domain-scoped. Verification API keys are account-scoped and intentionally separated from email-sending credentials.

Ready to send?

Create a free Sendzovo account, verify your domain and send your first email in minutes.

Start building