less than a minute read • Updated an hour ago
What is the store secret key?
What the Foxy store secret key is, which features rely on it, and how to view or customize it in the admin.
Every Foxy store is assigned a random 60-character secret key when it’s created. This key secures several different features that need to verify or encrypt information, including the legacy XML datafeed, the legacy API, link/form validation (cart signing), and Single Sign-On (SSO).
By default, the same secret key value is used for all of these features. Each one can be customized individually if you need a different key per feature.
New admin
In the new admin, each setting is configured individually within its own section. By default they all use the same secret key, but each can be customized separately:
Legacy XML datafeed key: Settings > Integrations > Encryption key (within the “Legacy XML datafeed” section)
Legacy API key: Settings > General > API key (within the “Legacy API” section)
Link/Form Validation: Settings > Cart > HMAC encryption key (within the “Advanced” section)
Single Sign-On: Settings > Checkout > SSO Secret (within the “Advanced” section, when “Enable SSO” is checked)
Customizing one of these does not affect the others. Each key supports a maximum of 100 characters.
Legacy admin
In the legacy admin, the store secret can be updated from the “advanced” settings page, using the “store secret” option.
If you’d prefer to use a unique key for each feature instead of one shared key, you can enter a JSON value instead of a plain string. The JSON must include all four keys, though you can reuse the same value for more than one if you like:
json { "cart_signing": "xxx", "sso": "xxx", "api_legacy": "xxx", "xml_datafeed": "xxx" }
Use your own unique strings for each value, up to a maximum of 100 characters per value. If you use the JSON format, make sure you reference the correct key for each respective feature.