How to Get Your Freshdesk API Key

Click your avatar in the top-right corner of Freshdesk and choose Profile settings. This lands you on a page titled My Profile Settings, which is different from the account-wide Admin settings — it holds things tied specifically to you as an agent, like your time zone, display language, and email signature. If you're on a trial account you'll still see the usual banner reminders across the top, but they don't affect anything on this page.

The key itself sits above the fields you just saw, in a card labeled Your API Key right next to your Profile Details — full name, email, and phone number. It's a long alphanumeric string shown in a read-only box, already masked or partially selected so you don't accidentally edit it. Right below the key is a Reset API Key button, which is worth noting now even if you don't need it yet.

Select the string in the API key box, copy it, and paste it directly into whatever integration, script, or password manager you're setting up — don't leave it sitting in a plain text file or a chat message. This key authenticates as you, with your exact permissions, so anything with the key can read and write Freshdesk data on your behalf. If you're building something a whole team will maintain, consider creating a dedicated service agent for the integration rather than tying it to one person's personal key.

Freshdesk's REST API accepts the API key as the username in HTTP basic authentication, with any string (commonly the letter X) as the password — this is documented in Freshdesk's API reference and is the standard pattern most integration tools expect. Test the connection with a simple read request, like fetching your ticket list, before wiring up anything that writes data, so you catch a bad key or wrong domain early rather than after an automation starts running.

If you accidentally commit the key to a public repository, paste it somewhere it shouldn't be, or simply suspect it's been seen by someone it shouldn't have, use the Reset API Key button on the same profile page. Resetting immediately invalidates the old key, so update every integration that used it right away — Freshdesk won't warn those tools individually, they'll just start failing until you swap in the new value.