Skip to content
ValgixValgix Docs

Test and live environments

HumanPass separates test and live sites and credentials. Prefixes make accidental mixing easier to identify.

Environment Sitekey prefix Secret prefix Purpose
Test hp_site_test_ hp_secret_test_ Local development and integration testing
Live hp_site_live_ hp_secret_live_ Production traffic

Test environment

Section titled “Test environment”

Use a test site while building your integration. Test sites can allow exact localhost origins in non-production runtimes.

Test responses still follow normal expiry, action, hostname, and single-use rules. This makes local behavior representative of production without using live credentials.

Live environment

Section titled “Live environment”

Live origins require HTTPS. Add the exact production hostnames that render the widget and use only the matching live secret on your backend.

Promotion checklist

Section titled “Promotion checklist”

Before switching to live:

  1. Create or select the live site.
  2. Add all production hostnames.
  3. Configure the intended mode and allowed actions.
  4. Replace the browser sitekey.
  5. Replace the backend secret through your secret manager.
  6. Set expectedHostname and expectedAction in backend verification.
  7. Test success, expired-token, duplicate-token, and HumanPass-unavailable paths.