# Source: https://docs.runpod.io/get-started/api-keys.md


> ## Documentation Index
> Fetch the complete documentation index at: https://docs.runpod.io/llms.txt
> Use this file to discover all available pages before exploring further.


## Manage API keys

> Learn how to create, edit, and disable Runpod API keys.

<Note>
  Legacy API keys generated before November 11, 2024 have either Read/Write or Read Only access to GraphQL based on what was set for that key. All legacy keys have full access to AI API. To improve security, generate a new key with **Restricted** permission and select the minimum permission needed for your use case.
</Note>

## Create an API key

Follow these steps to create a new Runpod API key:

1. In the Runpod console, navigate to the [Settings page](https://www.console.runpod.io/user/settings).

2. Expand the **API Keys** section and select **Create API Key**.

3. Give your key a name and set its permissions (**All**, **Restricted**, or **Read Only**). If you choose **Restricted**, you can customize access for each Runpod API:

   * **None**: No access
   * **Restricted**: Customize access for each of your [Serverless endpoints](/serverless/overview). (Default: None.)
   * **Read/Write**: Full access to your endpoints.
   * **Read Only**: Read access without write access.

4. Select **Create**, then select your newly-generated key to copy it to your clipboard.

<Warning>
  Runpod does not store your API key, so you may wish to save it elsewhere (e.g., in your password manager, or in a GitHub secret). Treat your API key like a password and don't share it with anyone.
</Warning>

## Edit API key permissions

To edit an API key:

1. Navigate to the [Settings page](https://www.console.runpod.io/user/settings).
2. Under **API Keys**, select the pencil icon for the key you wish to update
3. Update the key with your desired permissions, then select **Update**.

## Enable/disable an API key

To enable/disable an API key:

1. Navigate to the [Settings page](https://www.console.runpod.io/user/settings).
2. Under **API Keys**, select the toggle for the API key you wish to enable/disable, then select **Yes** in the confirmation modal.

## Delete an API key

To delete an API key:

1. From the console, select **Settings**.
2. Under **API Keys**, select the trash can icon and select **Revoke Key** in the confirmation modal.