# Shared Content
source: https://developer.mastercard.com/mastercard-developers-api/documentation/sharedcontent/generate-creds/index.md

1. Log in to [Mastercard Developers](https://developer.mastercard.com/dashboard) and navigate to your **Account** page.
2. In your Account page, go to the Developers API Keys section and click **Add key**.
3. **Choose Key Creation Method:**
   * **Option 1: Browser Keystore**
     1. Select **Generate key**.
     2. Enter a **Key name** and **Key password**.
     3. If prompted, review and accept the **Mastercard Developers API Terms \& Conditions** to proceed.
     4. Click **Create key**.
     5. Click **Download key** to download the [signing key](https://developer.mastercard.com/platform/documentation/security-and-authentication/using-oauth-1a-to-access-mastercard-apis/#the-signing-key) as a PKCS#12 keystore. Download and save your key file in a secure location. Once you exit this screen, you won't be able to download it.
     6. Get your [consumer key](https://developer.mastercard.com/platform/documentation/security-and-authentication/using-oauth-1a-to-access-mastercard-apis/#the-consumer-key) from the Developers API Keys section of your Account page.
   * **Option 2: Certificate Signing Request (CSR)**
     1. Select **Upload a CSR**.
     2. Enter a **Key name** and click **Add an attachment** to upload your CSR file.
     3. If prompted, review and accept the **Mastercard Developers API Terms \& Conditions** to proceed.
     4. Click **Create Key**.
     5. Get your [consumer key](https://developer.mastercard.com/platform/documentation/security-and-authentication/using-oauth-1a-to-access-mastercard-apis/#the-consumer-key) from the Developers API Keys section of your Account page.

**Key Limits and Status:**

* After adding a key, its status will appear as **Pending**. You will receive an email notification once the key is approved, after which you can start sending requests to Developers API.
* You can add a maximum of **2 keys**.
* If a key request is declined, you must revoke the declined key before adding a new one.
