> ## Documentation Index
> Fetch the complete documentation index at: https://docs.beem.africa/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> Best practices for storing OTP API credentials and PIN IDs.

<Info>
  Treat your **API Secret** like a password. Never expose it in frontend applications or commit it to source control.
</Info>

**Best practices**

* Store API credentials and access tokens in environment variables.
* Keep your API Secret and access token confidential.
* Save the returned PIN ID until verification is complete.
* Never expose API credentials in client-side applications.

***

## What's next?

Use the API reference pages in the sidebar for interactive examples:

* **Request OTP** — Generate and send an OTP to a customer.
* **Verify OTP** — Validate the OTP entered by the customer.

See [API responses](/guides/otp/api-responses) for OTP-specific response codes.

<Tip>
  If you encounter any issues during integration, ensure your API credentials are active and that you're using the correct channel configuration in your Beem dashboard.
</Tip>