The API key and secret key are generated for you alone. You should make sure that they remain secret and others do not have access to them. If someone finds out your API key and secret key there is a Reset Api Keys link which will generate you a new set of keys.