Lyonga has two separate environments: sandbox for testing and live for real payments. Each has its own keys, and data is never shared between them.
Keeping keys safe
- Your secret key is shown only once. Store it in a secrets manager or environment variable.
- Never put a secret key in a website, mobile app or public code repository.
- Call the Lyonga API only from your server.
- If a key may have been exposed, revoke it in the dashboard and create a new one straight away.
We store only a hash of your secret key, so we cannot recover it for you. If you lose it, create a new one.