Short API Keys

1612 2 5

Hi there, just got set up with BidSlammer.

Everything seems to work well, but I couldn't help but notice that the API keys were _very_ short.
16 hex characters has only 64 bits of entropy, which is honestly probably fine for a niche app but also not best practice in terms of cybersecurity.

Minimum recommended is 128 bits, I usually use 256 just to be safe.

Cheers,
~Chris
tap********ukv
Hello Chris,

Thank you for your comment on the API. You're right, of course, and we're updating it to 32 characters this week. 64+ is for nuclear launch code kind of stuff.

If you use the API, let us know and we'll add you to the newsletter list, which goes out about twice a year.
bidslammer