# Hiding the API Key

**URL:** <https://meta.discourse.org/t/hiding-the-api-key/155136>\
**Category:** Development\
**Created:** [June 17, 2020, 3:03pm UTC](https://meta.discourse.org/t/hiding-the-api-key/155136 "2020-06-17T15:03:51Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)\
**Post date:** [June 17, 2020, 3:59pm UTC](https://meta.discourse.org/t/hiding-the-api-key/155136/2 "2020-06-17T15:59:14Z")

</div>

An app doing any kind of sensitive API requests will want do do those in the backend, instead of the front end.

You get many benefits, like custom caching, parallel API calls, security, etc. It isn’t a good idea to do this in JS code running in the client.

---

_[View the full topic](https://meta.discourse.org/t/hiding-the-api-key/155136)._