24 days ago
- Use cryptographically secure random number generator (CSPRNG) for 128 bits of randomness.
- Add human-readable prefix indicating type and environment (e.g., sk_live_).
- Store only the SHA-256 hash; never store plaintext keys; show key only once.
- Verify keys via four-step process: format validation, hashing, database lookup, scope check.