In this article, we will explain what an SMTP key is and how you can create a new one or delete an existing one. For more information, you can also check our developer documentation about SMTP relay integration.

What is an SMTP key?

To send transactional emails from your website or application, you need to configure your SMTP settings to point to Brevo SMTP using:

• Your SMTP Login: a unique email address that acts as a username.
• An SMTP key: a secret key that acts as a password. The default SMTP key created during account creation is called the Master Password.
  

Where can I find my SMTP keys?

To protect your SMTP keys and make them more secure, any new SMTP keys is not visible from your Brevo account. Only the last digits of the keys are displayed on the SMTP & API page so that you can distinguish between several keys if necessary:

That's why we strongly suggest you store your SMTP key in a safe environment when you create it. If you've lost your SMTP key, we recommend you create a new one, store it in a safe environment, and replace the previous one.

Create a new SMTP key

To create a new SMTP key in your Brevo account:

1. Click the account dropdown > SMTP & API.
2. Under the SMTP tab, click Generate a new SMTP key.
3. Name your SMTP key.
4. Click Generate.
5. Copy the full key and save it in a safe environment.
   
   💡 Good to know

   The full key will only be displayed once, so make sure you create a secure copy. This key is confidential and should never be shared with anyone else or published on the Internet.
6. Once you're done, click OK.
   

You have now successfully created a new SMTP key.

Deactivate or reactivate an SMTP key

If you temporarily want to stop using an SMTP key, you can deactivate it:

1. Click the account dropdown > SMTP & API.
2. Select the SMTP key you want to delete.
3. Click Deactivate SMTP key.
   
4. Click Deactivate to confirm.

You have now successfully deactivated your SMTP key. 

If you want to start using a deactivated SMTP key again, you can reactivate it:

1. Click the account dropdown > SMTP & API.
2. Select the SMTP key you want to delete.
3. Click Activate SMTP key.
   
4. Click Activate to confirm.

You have now successfully reactivated your SMTP key. 

Delete an SMTP key

If your account has been compromised or if you no longer use an integration that requires a particular SMTP key, you can delete that SMTP key:

1. Click the account dropdown > SMTP & API.
2. Select the SMTP key you want to delete.
3. Click Delete SMTP key.
   
4. Click Delete to confirm.

You have now successfully deleted your SMTP key.

Best practices with SMTP keys

SMTP keys should be protected in the same way as a password. Here are a few best practices to keep in mind when working with SMTP keys:

• Use a different SMTP key for each integration and specify the name of the integration in the name of the SMTP key so that you know exactly which key corresponds to each integration. That way, if an SMTP key is compromised, you can delete it without impacting your other integrations.
• Store your SMTP keys in a safe environment, not in a Word document or post-it note.
• Don't expose your SMTP key to the public. Make sure you hide your SMTP key, or even better, cut it completely in screenshots or videos.
• Never send an SMTP key via email in case someone hacks your email account.
  
• Always delete SMTP keys that are no longer used to limit the risks of leaks.

🤔 Have a question?

If you have a question, feel free to contact our support team by creating a ticket from your account. If you don't have an account yet, you can contact us here.

If you’re looking for help with a project using Brevo, we can match you with the right certified Brevo expert partner.