What's happening?
We're excited to introduce a new, more secure way to authenticate with Bandwidth APIs using OAuth 2.0 Client Credentials (Client ID and Client Secret).
What do I need to know?
Effective December 3, 2025, you can create and manage API credentials directly in the Bandwidth App or via API. These credentials will replace Basic Authentication with a secure, token‑based approach that follows the OAuth 2.0 Client Credentials framework.
What do I need to do?
If you’re currently using Basic Authentication, no immediate action is required. However, we recommend you begin familiarizing yourself with the new API credentials process:
Create new Client IDs and Secrets for test or development use.
Review your systems that currently rely on Basic Authentication, and identify where you need to replace those credentials.
Follow security best practices for secret storage and rotation (e.g., use a credential manager such as Vault or AWS Secrets Manager).
Questions?
Please reach out to your Bandwidth Support Team!