What Is an API Key? And Why a Stolen One Costs $82,314

Transcript

What is an API key? It's a password that lets an app use an AI, and every use goes on your bill.

One small startup's key got stolen. Their normal bill was about $180 a month. In 48 hours, it hit $82,314.

And it's common: about 29 million secrets leaked on GitHub in 2025.

Three rules. Never paste your key in code you share. Set a spending limit. And if it leaks, delete it right away.

Anyone with the key can use the service on your account, and you pay. One startup's bill went from about $180 a month to $82,314 in 48 hours.

Never paste it into code you share, set a spending limit, and delete the key right away if it leaks.

GitGuardian counted about 29 million secrets leaked on public GitHub in 2025.