# Authentication

Source: https://hashisoft.com/docs/authentication

Create an API key and store it in your server environment or CI secret store.

```bash
export hashirapikey="your-api-key"
```

## Bearer authentication

Include the key in the Authorization header on every request, including status checks and downloads.

```bash
curl --fail-with-body "https://api.hashisoft.com/v1/account" \
  --header "Authorization: Bearer $hashirapikey"
```

## Keep keys private

Keep keys out of browser code and public repositories. New keys are shown once. Disable or delete a key when it should no longer be used.