IpForensics
HomeGoto Dashboard
  • 📖Introduction
  • Protocols
    • HTTP Json Protocol
    • Response headers
    • Error Codes
  • Features
    • Pay-As-You-Go
    • API Security
    • HTTPS
  • Api Response Data
    • 📶Mobile Carrier
    • 🏥ASN
    • 📊General
    • ⏲️Timezone
    • 💵Currency
    • 👨‍💻Threat Detector
    • 🌐Company
    • 🌏Geolocation
    • 🌍Advance Geolocation
    • 💻Device Information
    • ✈️IATA/ICAO
  • API
    • 🚀Intro
    • 📊IP & Threat Intelligence API
      • Single Lookup
      • Origin Lookup
    • 💹Exchange Rate API
      • Currency Endpoint
      • Live Rate Endpoint
      • Historical Rate Endpoint
      • Currency Conversion Endpoint
      • Currency Swap Endpoint
  • Code Implantation
    • Block Automated Visits From Hosting Providers
    • Block VPN/Proxy and Tor users
    • Redirect by Country and Location Offers
    • Content Personalisation
    • Get the location from an IP Address in Javascript
    • How to get a client's IP address using JavaScript
    • HTML5 Geolocation with IpForensics fallback
    • Blocking Users by Country
    • Detecting Users Currency or Currency Personalisation
    • Preventing Free Trial Abuse
    • Device-Based Ads and App Binary
    • Detect Users Device/Computer and Operating System
    • Detect visitors from EU countries
    • How to detect and prevent credit card fraud
    • How to convert amounts to website visitor currency
  • MISC
    • Changelog
    • FAQs
    • Troubleshooting
    • API Status
    • Rate Limits
Powered by GitBook
On this page

Was this helpful?

  1. Features

API Security

PreviousPay-As-You-GoNextHTTPS

Last updated 2 years ago

Was this helpful?

Secure your API Key by whitelisting your domains and server IPs.

API security helps to prevent unauthorized use of your api key and token theft. You can control what IP addresses and host can use your API key.

When using the IpForensics API from your website in Javascript, you may worry that anyone would be able to see your API key and steal your tokens; creating a whitelist allows you to restrict the hosts from where your API key can be used.

Once you secure your API key will not work from anywhere else other than the hosts you have specified

Here are some tips to get started with API Security

  • You can whitelist multiple domains, sub-domains or IP addresses.

  • Enter multiple origins separated by commas and no spaces e.g yourwebsite.com,subdomain.yourwebsite.com

  • Enter IP addresses separated by commas and no spaces e.g 127.0.0.1,192.168.4.5,...

  • You can include or exclude the "https://" or "http://" url part.

To ensure API Security, login to your dashboard and navigate to API Security page

See the image below

https://ipforensics.net/api/security