On This Page
Security Best Practices
Here are some tips to ensure that your keys remain secure.
- Store private keys in a secure location with restricted permissions.
- Never commit private keys to version control.
- Rotate certificates before expiration.
- Use environment variables or secure vaults for production deployments.
- Keep back-up copies of your private keys in a secure location.
Securing Your Private Key
Keep your
request_private.pem
file secure. This private key is required to decrypt incoming webhook notifications. To modify the permissions so that only the file owner can read and write to the files, use this command:chmod 600 request_private.pem