Easy Tech TutsHow to Get Cloudflare API Key, Find & Create it Easily 2026
By Impran M N
Connecting a plugin or script to Cloudflare requires either a scoped API Token or the legacy Global API Key, and knowing the difference matters for security. This guide covers creating a scoped token using built-in templates, and finding your Global API Key when an older integration requires it.
01Open your API Tokens page
Go to your Cloudflare profile and open the API Tokens workspace from the navigation sidebar.
02Create a scoped token
Click 'Create Token' and either select a built-in template, such as one for WordPress or Zone DNS editing, or define custom read and write permissions.
03Generate and copy the token
Review your token's permission summary, click Generate, and copy the resulting string, since it's only shown once.
04Find your Global API Key if needed
Scroll to the Keys grid on the same page to locate the legacy Global API Key row.
05Unlock and copy the key
Enter your account password to reveal the alphanumeric Global API Key, then copy it securely.
Frequently asked questions
Should I use a scoped API Token or the Global API Key?
Scoped API Tokens are recommended for most integrations since they limit permissions to only what's needed, while the Global API Key grants full account access and should be reserved for legacy tools that require it.
Can I see my API Token again after I close the generation screen?
No, Cloudflare only displays the full token value once at creation, so you need to copy and store it securely at that time.
What should I do if I think my API key was compromised?
Roll the compromised credential immediately by revoking the token or regenerating the Global API Key from your profile settings.
Do I need my account password to view the Global API Key?
Yes, Cloudflare requires you to re-enter your account password as a security check before revealing the Global API Key.
Watch the full walkthrough
The same steps, demonstrated on screen from start to finish.
