---
title: Your API Keys
sidebar_position: 60
---
An _API_ key is a unique identifier used to authenticate and authorize a
request to the FreeSewing backend. Whereas a username (and password) are
intended for users, API keys (and secret) are intended to authenticate and
authorize a robot, program, or script rather than a human user.
To create a FreeSewing API key, you need to provide the following fields:
- [Name](#name)
- [Permission level](#level)
- [Expiry](#expiry)
:::note
API keys are an advanced feature aimed at developers and geeky users.
:::
## Name
Every API key has a **name** attribute that is mandatory.
In other words, you must give each of your API keys a name, but that name can
be anything you want.
Typically, people give names that describe where the key is used, like:
- Production backend
- GitLab runner
- Local development on my laptop
But you do you.
## Permission level {#level}
Every API key has a **permission level** the controls what the key can do.
The permission level is a number from `0` to `4` with the following significance:
- `0` : Authenticate only
- `1` : Read access to your own patterns and measurements sets
- `2` : Read access to all your account data
- `3` : Write access to your own patterns and measurements sets
- `4` : Write access to all your account data
:::tip
For more details, refer to [the backend documentation on FreeSewing.dev](https://freesewing.dev/reference/backend/rbac#permission-levels)
:::
## Expiry
Every API key has an **expiry date** after which the key will stop working.
By default, API keys expire after 1 month, but we support up to two years.
:::note
When your key is about to expire, you must replace it with a new one.
You cannot extend the expiry date of a key once set.
:::
