# Create access keys
Source: https://docs.infraista.com/en/data-storage/object-storage/create-access-keys



Access keys are the S3 credentials your tools and apps sign requests with. Each key has an **access key
ID** and a **secret**. Give every app its own key, with only the buckets it needs.

Keys belong to the organization and work in every region.

## Create a key [#create-a-key]

1. Go to **Data & Storage › Object Storage** and select **Access keys** (or open a bucket's
   **Permissions** tab and select **Manage access keys**).
2. Select **Create access key**.
3. Enter a **Name** that tells you where the key is used.
4. Under **Buckets**, choose **All buckets** (including buckets you create later) or **Selected buckets**
   (recommended for apps and scripts) and tick them.
5. Under **Permission**, choose:
   * **Read only**: list and download objects;
   * **Read and write**: also upload, overwrite and delete objects.
6. Select **Create key**.

<Shot name="data-storage/object-storage/new-key" alt="The New access key panel with the name, bucket scope and permission options" />

## Save the secret [#save-the-secret]

The console shows the **Access key ID** and the **Secret access key** once. Copy the secret into a
password manager or your app's secret store, then select **I've saved the secret**.

Lost it? Revoke the key and create a new one: the secret can't be shown again.

After you create a key, **Use a key** on the same page shows ready-made AWS CLI and rclone setups with its
key ID filled in. See [Connect your S3 tools](/en/data-storage/object-storage/connect-s3-tools).

## See and revoke keys [#see-and-revoke-keys]

**Your keys** lists every key with its scope, when it was created and when it was last used.

<Shot name="data-storage/object-storage/keys" alt="The Access keys page with the list of keys, their scope, created and last used dates" />

To stop a key, select **Revoke** on its row and confirm with **Revoke key**. Apps using it stop working
right away, and presigned links it signed stop working too.

## Related [#related]

* [Control access to a bucket](/en/data-storage/object-storage/control-access)