> ## Documentation Index
> Fetch the complete documentation index at: https://docs.get-rial.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> One key for your server, one for your apps.

| Key                 | Looks like    | Where it lives                | Use it for                                                                 |
| ------------------- | ------------- | ----------------------------- | -------------------------------------------------------------------------- |
| **Secret key**      | `rk_secret_…` | Your server only              | Everything: create and read verifications, templates, databases.           |
| **Publishable key** | `pk_live_…`   | Inside your Android / iOS app | The native SDKs (by request). Identifies your account, can't read results. |

Create both in the dashboard: **Settings → API**.

```bash theme={null}
Authorization: Bearer rk_secret_...
```

<Warning>
  A secret key in an app or a browser is a leak. If it happens, revoke it in the dashboard and create a new one.
</Warning>

The capture link you send to a person needs no key. The link is the credential.