Security Best Practices {#wh-fg-mle-secure}
===========================================

Here are some tips to ensure that your keys remain secure.
* Store private keys in a secure location with restricted permissions.
* Never commit private keys to version control.
* Rotate certificates before expiration.
* Use environment variables or secure vaults for production deployments.
* Keep back-up copies of your private keys in a secure location.
  {#wh-fg-mle-secure_ul_zv4_pg5_13c}

Securing Your Private Key
-------------------------

Keep your *request_private.pem* file secure. This private key is required to decrypt incoming webhook notifications. To modify the permissions so that only the file owner can read and write to the files, use this command:

```
chmod 600 request_private.pem
```