An API keys page lets developers create, review and revoke credentials safely. Our examples show keys with scopes and last-used times, a one-time key reveal, a create key action and usage limits, designed for a fictional workspace product on web and mobile in eight visual styles with light and dark themes. Every example is an original design that comes with its HTML code and a DESIGN.md of colour, type and spacing tokens, in light and dark. Free to use and adapt.
16 examples
Showing a secret once means the service can store only a hashed version, so a database leak does not expose usable keys. It also encourages people to put the key straight into a secrets manager. If it is lost, they create a new one.
Key name, a masked identifier, scopes or permissions, creation date, last used time and who created it. Row actions should include revoke and, where supported, rotate. Expiry dates are worth showing if keys can expire.
Ask for confirmation that names the key and states that applications using it will stop working immediately. Revocation should take effect at once. Supporting several active keys lets teams rotate credentials by creating a new key before revoking the old one.
App screens
UI components
Website sections
Website templates
search_ui_screens (e.g. “billing settings, editorial style”), get_ui_flow for a whole journey, and get_ui_screen_code to pull the HTML and DESIGN.md straight into your project.