Storing and saving passwords inside applications is not safe. For better security our SDK provides two additional login methods: with the one-time login keys and with the renewable tokens. Keys omits the need to store passwords entirely by using your own backend that will generate a one-time login key each time your application needs to login the Voximplant cloud. Although very secure, the keys require your own backend to be created, while the “tokens” can be used entirely on the SDK side with some security and usability trade-offs that are explained in this article.

Some of our developers asked if there was a way to restrict access to VoxImplant HTTP API and only allow it for certain IP addresses or networks when api_key is being used. Today we updated the service and this setting is now available for all VoxImplant developers. It can be set in API Access part of the control panel.