Skip to main content

API Key Rotation - Important Security Update

· 2 min read

As part of our ongoing commitment to security best practices, we will be implementing API key rotation for all SMG Real Estate API customers. This is a proactive security measure to ensure the continued protection of your data and our platform.

This user-impacting change requires action from all users who have integrated with our APIs. You will need to update your API key in your applications to continue using the platform without interruption.

Click Read more for the details.

What is API Key Rotation?

API key rotation is a security practice where existing API keys are replaced with new ones on a regular basis. This helps minimize the risk of unauthorized access if a key is ever compromised and follows industry security standards.

Why We're Rotating API Keys

  • Enhanced Security: Regular key rotation reduces the window of opportunity for potential security breaches
  • Industry Best Practice: Following security standards recommended by cybersecurity experts
  • Proactive Protection: Staying ahead of potential security threats before they become issues

What You Need to Do

  1. Wait for Your New API Key: We will provide you with a new API key
  2. Update Your Applications: Replace the old API key with the new one in all your integrations. Detailed instructions can be found below
  3. Test Your Integration: Verify that your API calls work correctly with the new key
  4. Remove Old Key: Ensure the old API key is completely removed from your systems. Please notify us once the update has been completed, so we can proceed with deactivating your old API key in our systems

How to Update Your API Key

Simply replace the API key in your Authorization header:

Before:

curl -H "Authorization: ApiKey <OLD_API_KEY>" https://api.re.swissmarketplace.group/

After:

curl -H "Authorization: ApiKey <NEW_API_KEY>" https://api.re.swissmarketplace.group/

Need Help?

If you have questions about the API key rotation process or need assistance updating your integrations, please contact your account manager.

For technical documentation on using API keys, visit our API Setup Guide.