Payments & commerce

Protect Stripe

Restricted, read-only key — 2 minutes.

← All setup guides
  1. Go to dashboard.stripe.com → Developers → API keys.
  2. Click Create restricted key — not the secret key. A restricted key limits what it can ever do.
  3. Name it Waqi and set every permission to Read — nothing on Write.
  4. Copy the key (starts rk_live_) — Stripe shows it once. Paste it into Waqi dashboard → Connectors → Stripe.

A restricted read-only key can never move money, refund, or change anything — the strongest look-don’t-touch guarantee Stripe offers.

Every key you paste is encrypted (AES-256-GCM) before it's stored, is only ever decrypted for the moment of your own request, and is never visible again — to anyone, including your team's admins. How Waqi handles data →

Stuck on a step?

Email info@bilazann.com — we'll walk through Stripe with you.