API keys
Generating a key that lets a script or a service act as you, and revoking one you no longer want.
API Keys in the menu holds the same keys as the web console, so one generated on the phone works from a server and the other way round.
A key gives headless access to your account, for a script or a service that has to act as you with nobody there to sign in.
Generating one
Name the key after whatever will use it, then tap Generate key.
The token appears once, on a card directly under the button. Copy it there. You can hide and show it while the card is up, but dismissing the card or leaving the screen ends your only chance to read it, and from then on the list shows the first few characters and nothing more.
The list
Each active key shows its name, the start of its token, when it was last used and when it expires. A key whose last use says Never is the easiest kind to get rid of.
Revoking
The bin icon revokes a key after a confirmation. It stops working straight away and cannot be brought back, so when you are rotating a key, put the replacement in place first and revoke afterwards.
A key carries your access, which means anything holding it can reach what you can reach. See Roles and access.