Authentication
========================

Authenticate your account by including your secret API key in the request. You can access your PhishER Product API key and generate a new key if needed in your [KnowBe4 Account Settings](https://training.knowbe4.com/ui/account/info) under the [API](https://training.knowbe4.com/ui/account/info#api-settings) section. Your API keys provide access to the data within your KnowBe4 platform and should be kept private. Do not share your API key in publicly-accessible areas.

The PhishER Product API key should be included in all API requests to the server. The header should look like the following:</p>
      <mark style="background-color:#f2f2f2; color:#000; font-family:courier; padding:2px 5px;">Authorization&#x3A; Bearer &lt;your_token&gt;</mark><br>
      <br>
      <mark style="background-color:#efebf1;"><i class="fas fa-info-circle"></i>&nbsp;You must replace <mark style="background-color:#f2f2f2; color:#000; font-family:courier; padding:2px 5px;">	&lt;your_token&gt;</mark> with your PhishER Product API key.</mark><br>
<br>

All API requests must be made over HTTPS. Calls made over plain HTTP will fail. API requests without authentication will also fail.