# Confusing concepts in Shopify Python API **URL:** \ **Category:** Graphql Basics And Troubleshooting\ **Created:** [February 6, 2022, 12:09pm UTC](https://community.shopify.com/t/confusing-concepts-in-shopify-python-api/97348 "2022-02-06T12:09:30Z")\ **Posts on this page:** 3\ **Page:** 1 ## AI-generated summary Confusion over Shopify Python API credentials: what “PASSWORD” and “SHARED_SECRET” refer to, and how to obtain them in current apps. Key clarifications: - “PASSWORD” in the Getting Started example applies to legacy private apps. Private apps are discontinued for new creation (existing ones still work). For new custom apps, use API key and API secret key; no “password” is used. - “SHARED_SECRET” was historically used (e.g., for webhook HMAC verification) with private apps. The reply does not explicitly state where to find it for custom apps; only that custom apps use API key and API secret key. Context/terms: - API key: public identifier for the app. - API secret key: sensitive credential used for secure flows (e.g., signing, OAuth). - Shared secret: term commonly used for the secret used in verifications; mapping to the “API secret key” for custom apps is implied but not confirmed in the thread. Outcome/status: - Partial resolution: migrate to custom apps and authenticate with API key + API secret key. - Open question: explicit guidance on “shared_secret” for webhooks in custom apps remains unanswered. A screenshot shows where to find the API key and API secret key.
**Author:** ![shapano](https://avatars.discourse-cdn.com/v4/letter/s/e79b87/32.png) [@shapano](https://community.shopify.com/u/shapano)\ **Post date:** [February 6, 2022, 12:09pm UTC](https://community.shopify.com/t/confusing-concepts-in-shopify-python-api/97348/1 "2022-02-06T12:09:30Z")
> **Show More** > > PASSWORD or “API SECRET KEY”? I am new to Shopify API and it seems to me the Shopify Python API are mixing up or confuse new comers like me. In their Getting Started section on [http://shopify.github.io/shopify\_python\_api/](http://shopify.github.io/shopify_python_api/) they mention API\_KEY and the PASSWORD. But what is PASSWORD ?Is it the password I use to user name to connect to my Shopify webshop or other? I can only generate or find API\_KEY and “API secret key” (nothing about PASSWORD) in my app. It mentions also SHARED\_SECRET. What is that and where I can generate or find that? I have not been able to connect via API to my app due to confusing concepts here in this API documentation. ---
**Author:** ![get4137](https://avatars.discourse-cdn.com/v4/letter/g/3ec8ea/32.png) [@get4137](https://community.shopify.com/u/get4137)\ **Post date:** [February 7, 2022, 1:52pm UTC](https://community.shopify.com/t/confusing-concepts-in-shopify-python-api/97348/2 "2022-02-07T13:52:37Z")
I am confused too. I used ‘shared\_secret’ in the private app for webhook verification. Where I can find ‘shared\_secret’ for new custom apps?.. ---
**Author:** ![csam](https://yyz1.discourse-cdn.com/shopifyforum/user_avatar/community.shopify.com/csam/32/379981_2.png) [@csam](https://community.shopify.com/u/csam)\ **Post date:** [February 8, 2022, 6:47pm UTC](https://community.shopify.com/t/confusing-concepts-in-shopify-python-api/97348/3 "2022-02-08T18:47:48Z")
Hi @shapano and @get4137 Thanks for your questions regarding which credentials to use with the Python API. The first example in the tutorial showing PASSWORD is for a private app. Private apps have been discontinued - while pre-existing private apps will continue to work, you are not able to create new ones. Rather, you will now be creating a custom app, either via the partner admin or directly in your Shopify shop admin. The custom app uses the API key and API secret key, rather than the password. It looks like this: ![22-02-ifwu6-4zir9](https://canada1.discourse-cdn.com/shopifyforum/original/3X/2/b/2bcb6fc751b9f3cd74faf0c94f47d07b90c41cf2.png) Hope this helps!