Help Center/ Object Storage Service/ BrowserJS SDK Developer Guide (Ally Region)/ Quick Start/ Creating an AK and SK
Updated on 2026-01-16 GMT+08:00
View PDF
Share

Creating an AK and SK

OBS uses access keys (AK and SK) for signature verification to ensure that only authorized accounts can access specified OBS resources. Detailed explanations are as follows:

  • An access key ID (AK) defines a user who accesses the OBS system. An AK belongs to only one user, but one user can have multiple AKs. The OBS system recognizes the users who access the system by their access key IDs.
  • An SK is the secret access key on OBS, which is required to access OBS. You can generate authentication information based on the SKs and request header fields. An SK matches an AK, and they group into a pair.

The procedure is as follows:

  1. Log in to OBS Console.
  2. In the upper right corner of the page, click the username and choose My Credentials.
  3. On the My Credentials page, click the Access Keys tab, and then click Add Access Key below the displayed access key list.
  4. In the Add Access Key dialog box that is displayed, enter the password and its verification code.
    • If you have not bound an email address or mobile number, you need to enter only the password.
    • If you have bound an email address and a mobile number, you can select the verification either by email address or mobile number.
  5. Click OK.
  6. In the Download Access Key dialog box that is displayed, click OK to save the access keys to your browser's default download path.
  7. Open the downloaded credentials.csv file to obtain the access keys (AK and SK).
  • Each user can create up to two valid AK/SK pairs.
  • To prevent the AK/SK from being leaked, keep them secure. If you click Cancel in the dialog box, the access keys will not be downloaded, and cannot be obtained later. You can re-create access keys if you need to use them.
  • To get temporary access keys, refer to the following:

    Temporary access keys are issued by the system and are only valid for 15 minutes to 24 hours. Once expired, they must be requested again. They follow the principle of least privilege. When a temporary AK/SK pair is used for authentication, a security token must be used at the same time.

Parent topic: Quick Start