Stripe Integration: How It Works and Why You Never Share Your Password

Adding Stripe to a website does not require handing over your Stripe login. The connection between your website and your Stripe account is made with API keys, and Stripe has team and permission features designed for sharing access safely.

How the connection works

Stripe gives each account a pair of API keys: a publishable key, which is used in the visitor’s browser, and a secret key, which must stay private on the server. There are separate sets of keys for test mode and live mode. Your website uses these keys to create payments in your account, so the money goes straight to you.

Use a plugin or custom code

For WooCommerce, an official Stripe plugin handles most of the work: you install it, connect your account and choose payment methods. For custom sites or special flows, developers write code that talks to Stripe’s API.

Treat the secret key like a password

The secret key can be used to create charges and, depending on its permissions, access data. That is why you should:

• Enter it yourself in the plugin settings where possible.
• Create a restricted key with only the permissions the integration needs.
• Never post it in an email thread, public chat or screenshot.
• Roll (replace) the key if you think it has been exposed.

Use team roles instead of your login

If someone needs to look at your Stripe dashboard, invite them as a team member with a limited role and ask them to turn on two-factor authentication. You can remove them whenever you like.

Test before going live

Use test mode and Stripe’s test card numbers to check successful payments, failed payments, refunds and emails. Only switch to live keys when everything works. Then make a small real purchase to confirm it.

Can I do it myself?

Often yes. A standard WooCommerce set-up is well documented. We can help when you want it tested thoroughly or need subscriptions, multiple currencies or custom checkout. See our payment integration service and our guide to PayPal integration.