Security & Privacy

🔐 Overview

The Security & Privacy section allows you to control where your product configurators can be embedded. This ensures your integrations are secure and your configurators only appear on authorized websites.

🔑 API Keys - Generate and manage API keys for secure website integration. These keys authenticate your configurators when they are embedded on your website. You can use one across all sites, or generate a new key for each site.

🌐 Authorized Domains - Control which domains are allowed to embed and display your OV25 product configurators. This security feature prevents unauthorized use of your products on third-party sites.

These two features work together to ensure your configurators are only embedded where you choose.

---

🔑 API Keys

API keys are used to authenticate your configurators when they are embedded on your website. You can use one across all sites, or generate a new key for each site.

🔑 API Key Types

There are two types of API keys:

• Product Configurator Access - Public key used to embed your product configurators on your website.
• Private API Key - Private key used in backends to make API calls to the OV25 API.

➕ Generating a New API Key

1. Navigate to the API Keys page
2. Click the "Generate New API Key" button
3. Provide a descriptive name for the key (e.g., "Production Website", "Staging Environment")
4. The system will generate a unique API key
5. Use your API key when embedding configurators onto your website.

❌ Revoking an API Key

If you need to revoke an API key:

1. Locate the key in your API Keys list
2. Click the "Revoke Key" button
3. Confirm the action

🌐 Authorized Domains

Authorized Domains is a security feature that controls which websites can embed and display your OV25 product configurators. This prevents unauthorized use of your products on third-party sites and ensures your configurators only appear on domains you've explicitly approved.

➕ Adding an Authorized Domain

1. Navigate to the Authorized Domains page
2. Click the "Add Domain" button
3. Enter the domain name (e.g., example.com or www.example.com)
4. Click "Save" to authorize the domain

❌ Removing a Domain

To revoke access for a domain:

1. Locate the domain in your authorized domains list
2. Click the "Remove" or "Revoke" button

---

📚 Related Documentation

• Developer Documentation - Learn how to integrate OV25 into your website