> ## Documentation Index
> Fetch the complete documentation index at: https://www.canva.dev/docs/extensions/llms.txt
> Use this file to discover all available pages before exploring further.

# Client secret

What is a client secret? Why use one?

Every app has a unique *client secret*. This is a sensitive value that's shared between Canva and your app. You need this secret to [verify request signatures](https://www.canva.dev/docs/extensions/backend-development/verify-request/verify-post-request-signature/).



To get your app's client secret:

1. Navigate to an app via the Developer Portal.
2. Open the **Verification** page.
3. Under the **Client secret** field, click **Copy**.

**Tip:**
We recommend storing client secrets as environment variables.

**Danger:**
You should never share a client secret or commit it to source control.