What are Composer access keys and how do I keep them safe?

Composer access keys let you install the extensions you bought from our private Composer repository. You generate them in your account.

• Keep them confidential: do not commit them to public repositories or share them outside your team and the developers working on your licensed store.
• You can bind a key to a licensed domain, and we recommend that you do.
• We log each Composer download (package, version, IP address and time) to protect the repository.
• If a key appears to have been leaked or shared, we may reset it and will let you know.