> For the complete documentation index, see [llms.txt](https://docs.eazybackup.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.eazybackup.com/e3-object-storage/using-the-dashboard/access-keys.md).

# Access Keys

Service URL, Root user access keys, rotation, and password verification on the Access Keys page.

The **Access Keys** page manages the **Root user** S3 credentials and displays the **Service URL** every client needs.

**Navigation:** **e3 Object Storage → Access Keys**

{% hint style="info" %}
Keys for **Users** (not Root) are created on the **Users** page. This page is only for the Root user identity.
{% endhint %}

## Service URL

Copy **Service URL**: `s3.ca-central-1.eazybackup.com`

Use this hostname as the S3 endpoint in backup apps, CLI tools, and SDKs. See [Connection details](/e3-object-storage/getting-started/connection-details.md).

## Root user key table

| Column           | Description                               |
| ---------------- | ----------------------------------------- |
| **Owner**        | Root user                                 |
| **Account ID**   | Tenant ID used in bucket policies         |
| **Access Key**   | Key hint (full ID shown once at creation) |
| **Date Created** | When the current key was issued           |
| **Actions**      | Create or rotate key                      |

If no key exists yet, click **Create your first key**.

## Create or rotate a key

1. Click **Create your first key** or **Create new key**.
2. Enter your **account password** to confirm.
3. Copy the **Access Key ID** and **Secret Access Key** immediately.

{% hint style="danger" %}
The secret is shown **only once**. Rotation **revokes the previous secret immediately** — update all applications before or immediately after rotating.
{% endhint %}

## Permissions

The Root user key always has **full** S3 access to **Root-owned buckets only**. It cannot list or write to buckets owned by Users.

## Multiple keys for workloads

For separate applications or least privilege:

1. Create a **User** on the **Users** page.
2. Create buckets owned by that User.
3. Issue one or more keys with **Full**, **Read/Write**, **Read**, or **Write** permissions.

See [Users](/e3-object-storage/using-the-dashboard/users.md).