Keysets

The Keysets subsection provides a way to configure PubNub features per each keyset.

Limit of 3 keysets for Free tier accounts

Effective February 3, 2025, all Free tier accounts will be limited to a maximum of three keysets. If your account exceeds this limit, you must delete existing keysets to create new ones.

Each keyset overview page shows:

• Whether a keyset is of Testing or Production kind (depending on its purpose).
• Your app's publish, subscribe, and secret keys.
• Current and available configuration options, like Presence, App Context, or Access Manager.
• Recommended links to SDKs that can help you use the keys to build PubNub-powered apps.

Feature configuration

When you choose an app, you can see all the keysets assigned to this app. After choosing a given keyset, you also see all configurable features available for this keyset, including:

• Stream Controller
• Presence
• Access Manager
• Message Persistence
• App Context
• Mobile Push Notifications
  • Apple Push Credentials
  • Firebase Cloud Messaging
• File Sharing

Each feature contains a number of configurable parameters that influence how a given feature works.

When you create a keyset, some of the features are enabled with proposed default options.

To learn more about the available configuration options and the defaults, click the feature name.

Webhook configuration

Each PubNub feature that sends events (Presence, App Context, Mobile Push Notifications, and Message Persistence) can forward those events to configurable URLs. You can do this by creating a proper event listener and attaching a webhook action using Events & Actions.

Legacy webhook configuration

Webhooks used to be configurable on the Keysets page in Admin Portal. If you're on a paid plan, we will migrate your existing webhooks for you.

If you're on a free plan, refer to our webhook migration guide.

Manage secrets

The Manage secrets section allows you to create, update, and delete digital credentials for authentication purposes. Once created, you can use the secrets in Functions.

Roles with access

Only members with the Keyset Admin, Account Owner, and Account Admin roles can work with secrets.

You can add new entries to the vault by clicking the Create secret button, or, if you already have some entries, by clicking Edit in the top-right corner of the secrets table. Each new secret must have a name and a value.

Can't look up secret value

Once you create a secret, you can't check its value.

The secrets table displays all entries by default. You can use the search box at the top of the table to filter through the results.

Secret key rotation

If you are on a paid plan, you can rotate secret keys on your keyset.

This feature helps in maintaining a secure and compliant environment when using PubNub's services (such as Access Manager) by automating key management and avoiding the risk of using compromised keys.

Secret key rotation allows you to create up to 5 secret keys that will expire on a specific date in the future. The 5 secret keys include the current secret key being used.

Both active and expired secret keys are available in the Admin Portal under your currently active secret key.

To set up an expiry date for the secret key, select the Rotate button and use the date picker to choose the time when the secret key will expire.