Manage access keys

Last update: September 18 2026Open in Markdown

Access keys allow you to securely identify a user when working with Selectel products.

Different keys are used depending on the task:

• IAM tokens — for authenticating test requests to most Selectel APIs;
• SSH keys — for encrypted connection to servers;
• API keys — for authenticating requests to certain Selectel APIs;
• S3 keys — for accessing buckets in S3 and the Logs service;
• ADB keys — for connecting to devices in the Mobile Farm;
• Proxy keys — for proxying traffic of devices in the Mobile Farm.

Control panel users can manage their access keys: add new ones or delete those that are no longer needed.

Manage IAM tokens

For your information

We recommend using control panel user IAM tokens for testing purposes only. For use in production tools, create a service user and issue an IAM token to them. For more information, see the Get account-scoped IAM token and Get project-scoped IAM token subsections of the Request authentication API documentation guide

An IAM token (X-Auth-Token) for an account or project is used to manage Selectel products via API. For more information, see the Request authentication API documentation guide. The IAM token lifetime is 24 hours.

When a user authenticates in the control panel, IAM tokens are automatically issued for them in all scopes, and for the Project scope, in each project of the control panel user. A control panel user's IAM token can be copied or reissued.

Copy IAM token

1. In the control panel, in the upper-right corner, open the menu (account number) and select Profile.
2. Go to Access → IAM token tab.
3. Click Copy.
4. Select an access scope.
5. If you selected the Projects scope, select a project.
6. Click Copy.
7. Optional: to copy the token in another access scope or project, repeat steps 4-6.

Reissue IAM token

After the token is reissued, the old token stops working immediately.

1. In the control panel, in the top right corner, open the menu (account number) and select Profile.
2. Go to Access → IAM token tab.
3. Select a scope.
4. If you selected the Projects scope, select a project.
5. Click Reissue token → Reissue token.
6. Click Copy.

Manage SSH keys

To securely connect to a server via encrypted SSH protocol, you can add and delete SSH keys in your profile.

The Account Owner and users with the iam.admin role can manage SSH keys of other users, including service users. For more information, see the Manage user SSH keys subsection of the Edit user details or permissions guide.

Add SSH key

If you created an SSH key, you can add its public part to your profile. The added SSH key can then be placed on a cloud server.

The key will be available in all projects to which you have been added.

1. In the control panel, in the top right corner, open the menu (account number) and select Profile.
2. Go to Access → SSH keys tab.
3. Click Add key.
4. Enter the key name.
5. Paste the public SSH key in OpenSSH format.
6. Click Add.

Delete SSH key

1. In the control panel, in the top right corner, open the menu (account number) and select Profile.
2. Go to Access → SSH keys tab.
3. In the key menu, select Delete.
4. Click Delete.

Manage API keys

An API key (static token, X-Token) is used to manage certain Selectel products via API. For more information, see the Static token (X-Token)⁠ subsection of the Request authentication API documentation guide. The token lifetime is unlimited.

Add API key

Use the Get static token⁠ subsection of the Request authentication API documentation guide.

Disable API key

1. In the control panel, in the top right corner, open the menu (account number) and select Profile.
2. Go to Access → API keys tab.
3. In the key row, turn off the toggle switch.

Delete API key

1. In the control panel, in the top right corner, open the menu (account number) and select Profile.
2. Go to Access → API keys tab.
3. In the key menu, select Delete.
4. Enter the key name to confirm.
5. Click Delete.

Manage S3 keys

Control panel users can issue S3 keys to themselves, but we recommend creating service users and issuing S3 keys to them.

To issue an S3 key to another user, including a service user, use the Issue S3 key to user⁠ subsection of the Edit user details or permissions guide.

Add S3 key

1. In the control panel, in the top right corner, open the menu (account number) and select Profile.
2. Go to Access → S3 keys tab.
3. Click Add key.
4. Enter the key name.
5. Select the project for which the key will work.
6. Click Add.

Delete S3 key

1. In the control panel, in the top right corner, open the menu (account number) and select Profile.
2. Go to Access → S3 keys tab.
3. In the key row, click .
4. Click Delete.

Manage ADB keys

To connect to Mobile Farm devices via ADB, you can add a public key to your profile.

The Account Owner and users with the iam.admin role can manage ADB keys of other users, including service users. For more information, see the Manage user ADB keys subsection of the Edit user details or permissions guide.

Add ADB key

If you have created an ADB key pair, you can add the public key to your profile. The added public ADB key can be used to connect to Mobile Farm devices via ADB.

The key will be available in all projects to which you have been added.

1. In the control panel, in the top right corner, open the menu (account number) and select Profile.
2. Go to Access → ADB keys tab.
3. Click Add key.
4. Enter the key name.
5. Paste the public ADB key.
6. Click Add.

Delete ADB key

1. In the control panel, in the top right corner, open the menu (account number) and select Profile.
2. Go to Access → ADB keys tab.
3. In the key row, click .
4. Click Delete.

Manage Proxy keys

To proxy traffic from Mobile Farm devices, control panel users can add Proxy keys to themselves, but we recommend creating service users and issuing Proxy keys to them.

The Account Owner or a user with the iam.admin role can manage Proxy keys of other users, including service users. For more information, see the Manage user Proxy keys section of the Edit user details or permissions guide.

The key will be available in all projects to which the user has been added.

Add Proxy key

1. In the control panel, in the top right corner, open the menu (account number) and select Profile.
2. Go to Access → Proxy keys tab.
3. Click Add key.
4. Enter the key name.
5. Click Generate key.
6. In the Key field, click and save the key in a safe place — once the window is closed, it cannot be viewed.

Delete Proxy key

1. In the control panel, in the top right corner, open the menu (account number) and select Profile.
2. Go to Access → Proxy keys tab.
3. In the key row, click .
4. Click Delete.