Creating authorization keys
You can create an authorization key in the Dashboard or locally. During resource creation, specify the public key as the owner.
Keys are required to sign all requests to update a resource. Furthermore, a wallet’s owner is required to sign all requests to take actions with the wallet (POST /api/v1/wallets/<wallet_id>/rpc).
To create a new authorization key in the Dashboard, visit the Authorization keys page for your app.
Click the Generate new key button and copy and save the generated Authorization key. Privy does not save this key and cannot help you recover it later. You can also save a human-readable Key name.
In this process, Privy generates a keypair for your app directly on your device, and shows you the private key.
- The private key (e.g. the Authorization key you copy) is generated on your device, and is only ever known to your app. Neither Privy nor the secure enclave ever sees the private key, and cannot sign payloads with it.
- The public key is registered with the secure enclave that secures your wallets, and is used to verify signatures produced by your servers.