What is the difference between the site key and the secret key?

• **Site key (pk_...)** goes in the script on your pages. It is public by design and only works on your own domain.
• **Secret key (sk_...)** is for your server only. Never put it in a web page or a public code repository. It is shown once when created.

If a secret key leaks, open Connect → API keys and click Revoke (or Replace, which keeps the old key working for 24 hours while you switch).