Get application keys to connect your codebase

Application keys or App keys are credentials that you need to connect your codebase to Kinde. Each application and type has a unique set of keys you will find in the settings page for your application. Learn more about applications in Kinde.

View and copy app keys

Link to this section

1. Go to your Kinde dashboard and select View details on the application you want to connect.

2. Go to Details > scroll to the App keys section.

   You will find the following keys:

   • Custom domain - if you have configured a custom domain
   • Domain - this is the domain issued by Kinde
   • Client ID - unique for this app
   • Client secret - unique for this app (only back-end and M2M apps have client secrets)

3. Select the Copy icon next to the key you want to copy.

4. Add the app keys to your application by following the instructions in the relevant SDK.

App key FAQs

Link to this section

How can I rotate my client secret?

Link to this section

You can rotate client secrets for your back-end and M2M applications.

1. Go to the Details page of your application.
2. Scroll to the Admin actions section.
3. Select Rotate client secret.
4. Follow the prompts to rotate your client secret.

Learn more about how to rotate your client secret.

Why don’t front-end applications have a client secret?

Link to this section

Front-end applications such as single-page apps or mobile apps do not have a client secret because their source code is publicly available. Anyone can download the compiled package and see the client secret.

Learn more about how authorization works for front-end applications in Authorization Code Flow with PKCE.

How can I securely store my client secret?

Link to this section

Store your client secret in a secure environment, such as a secrets manager. Add your .env or configuration file to .gitignore to prevent it from being committed to your codebase.