---
title: "Secure Envoy APIs with API Key Authentication"
description: "Secure your Envoy API using a shared secret."
canonicalUrl: "https://zuplo.com/use-cases/api-key-auth/c/envoy/secure-header"
framework: "Envoy"
language: "C++"
authStrategy: "shared secret header"
pageType: use-case
---

# Secure Envoy APIs with API Key Authentication

Secure your Envoy API using a shared secret.

## How Zuplo Handles It

Put Zuplo in front of your Envoy backend to authenticate API keys and forward a shared secret header so your origin only accepts traffic from Zuplo.

## Envoy Backend Code

```text

```

## Example Request

```bash
curl -X GET \
  'https://your-api.zuplo.dev/your-route' \
  -H 'Authorization: Bearer YOUR_API_KEY'
```

## Learn More

- [API Key Authentication on Zuplo](https://zuplo.com/docs/policies/api-key-auth-inbound)
- [JWT Authentication on Zuplo](https://zuplo.com/docs/policies/open-id-jwt-auth-inbound)
- [All use cases](https://zuplo.com/use-cases)