In this article, we’ll explain what an SMTP key is, and how to create or delete one. For more technical details, check our developer documentation about SMTP relay integration.

What is an SMTP key?

To send transactional emails from your website or application, you need to configure your SMTP settings to point to Brevo SMTP, using the following credentials:

• SMTP login: a unique email address that serves as your username.
• SMTP key: a secret key that serves as your password.

Where can I find my SMTP keys?

To keep your SMTP keys secure, newly created keys are not fully visible in your Brevo account. On the SMTP & API page, only the last few digits of each key are displayed so you can identify them if needed.

Because of this, we strongly recommend storing your SMTP key in a secure location as soon as you create it. If you lose your key, you’ll need to generate a new one, store it safely, and replace the previous key in your configuration.

Create a new SMTP key

To create a new SMTP key in your Brevo account:

1. Click the account dropdown and select Settings > SMTP & API.
2. Under the SMTP tab, click Generate a new SMTP key.
3. Enter a name for your SMTP key. Include the integration name in the key’s name to easily identify it.
4. Select the variant of SMTP key you want to generate:

   • [Recommended] Standard: default secure SMTP key, 64 characters long.

   • Short: shorter key, 15 characters long.

     ❗️ Important

     The short SMTP key variant is only recommended if your SMTP client does not support long passwords.
5. Click Generate. The full SMTP key is displayed.
   
6. Copy the full key and save it in a secure location, such as a password manager app or an internal storage system.
   
   💡 Good to know

   The full key is displayed only once. Make sure to create a secure copy. This key is confidential and should never be shared or published online.
7. Click OK.
   

You have successfully created a new SMTP key. The account owner will receive an email notification, including details such as the IP address and location.

Deactivate or reactivate an SMTP key

If you want to temporarily stop using an SMTP key, you can deactivate it:

1. Click the account dropdown and select Settings > SMTP & API.
2. Under the SMTP tab, select the SMTP key you want to deactivate.
3. Click Deactivate SMTP key.
   
4. Click Deactivate to confirm.

Your SMTP key is now deactivated.

To reactivate a previously deactivated SMTP key:

1. Click the account dropdown and select Settings > SMTP & API.
2. Under the SMTP tab, select the SMTP key you want to reactivate.
3. Click Activate SMTP key.
   
4. Click Activate to confirm.

Your SMTP key is now active again.

Delete an SMTP key

If your account has been compromised or you no longer use a specific integration, you can delete its SMTP key:

1. Click the account dropdown and select Settings > SMTP & API.
2. Under the SMTP tab, select the SMTP key you want to delete.
3. Click Delete SMTP key.
   
4. Click Delete to confirm.

You have successfully deleted your SMTP key. The account owner will receive an email notification, including details such as the IP address and location.

Best practices for managing SMTP keys

Treat your SMTP keys with the same level of security as a password. Here are a few best practices:

• 🔑 Use a different SMTP key for each integration. Include the integration name in the key’s name to easily identify it. This makes it easier to revoke a single key if it’s compromised.
• 🔒 Store your keys securely, not in documents, emails, or sticky notes.
• 🚫 Never expose your SMTP key publicly. Hide or crop it in screenshots and videos.
• 📧 Avoid sharing keys via email, in case your mailbox is compromised.
• 🧹 Regularly delete unused keys to minimize security risks.

🤔 Have a question?

If you have a question, feel free to contact our support team by creating a ticket from your account. If you don't have an account yet, you can contact us here.

If you’re looking for help with a project using Brevo, we can match you with the right certified Brevo Agency partner.