# Access key not found (Code = 40110000)

**URL:** <https://forum.alpaca.markets/t/access-key-not-found-code-40110000/4687>\
**Category:** Random\
**Created:** [February 27, 2021, 11:59pm UTC](https://forum.alpaca.markets/t/access-key-not-found-code-40110000/4687 "2021-02-27T23:59:24Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![one\_lopes](https://avatars.discourse-cdn.com/v4/letter/o/977dab/32.png) [@one\_lopes](https://forum.alpaca.markets/u/one_lopes)\
**Post date:** [February 27, 2021, 11:59pm UTC](https://forum.alpaca.markets/t/access-key-not-found-code-40110000/4687/1 "2021-02-27T23:59:24Z")

</div>

Aloha,

I am unable to create a connection to either Live or Paper trade API’s. I confirmed I am using the right credentials for each endpoint but keep getting and this error.

“access key verification failed : access key not found (Code = 40110000)”

---

<div class="post-metadata">

**Author:** ![Peter](https://avatars.discourse-cdn.com/v4/letter/p/278dde/32.png) [@Peter](https://forum.alpaca.markets/u/Peter)\
**Post date:** [February 28, 2021, 2:28pm UTC](https://forum.alpaca.markets/t/access-key-not-found-code-40110000/4687/2 "2021-02-28T14:28:34Z")

</div>

Could you share your code? Minus your keys of course.

---

<div class="post-metadata">

**Author:** ![one\_lopes](https://avatars.discourse-cdn.com/v4/letter/o/977dab/32.png) [@one\_lopes](https://forum.alpaca.markets/u/one_lopes)\
**Post date:** [February 28, 2021, 3:31pm UTC](https://forum.alpaca.markets/t/access-key-not-found-code-40110000/4687/3 "2021-02-28T15:31:15Z")

</div>

No code other than setting up postman. Would love to start coding but can’t if the API won’t let me perform a validation.

---

<div class="post-metadata">

**Author:** ![one\_lopes](https://avatars.discourse-cdn.com/v4/letter/o/977dab/32.png) [@one\_lopes](https://forum.alpaca.markets/u/one_lopes)\
**Post date:** [February 28, 2021, 5:35pm UTC](https://forum.alpaca.markets/t/access-key-not-found-code-40110000/4687/4 "2021-02-28T17:35:49Z")

</div>

Here is a screenshot of the Postman output

 ![Screen Shot 2021-02-28 at 12.34.16 PM](https://us1.discourse-cdn.com/flex020/uploads/alp/original/2X/2/2c922acdc2337a6c9ad0e38e1a65cebe0c0f25ae.png)

---

<div class="post-metadata">

**Author:** ![one\_lopes](https://avatars.discourse-cdn.com/v4/letter/o/977dab/32.png) [@one\_lopes](https://forum.alpaca.markets/u/one_lopes)\
**Post date:** [February 28, 2021, 9:15pm UTC](https://forum.alpaca.markets/t/access-key-not-found-code-40110000/4687/5 "2021-02-28T21:15:22Z")

</div>

and the URL I’m hitting is…

[https://api.alpaca.markets/v2/orders?APCA-API-KEY-ID=](https://api.alpaca.markets/v2/orders?APCA-API-KEY-ID=)_MyKey_&APCA-API-SECRET-KEY=_mySecretKey_

---

<div class="post-metadata">

**Author:** ![Peter](https://avatars.discourse-cdn.com/v4/letter/p/278dde/32.png) [@Peter](https://forum.alpaca.markets/u/Peter)\
**Post date:** [March 1, 2021, 5:23am UTC](https://forum.alpaca.markets/t/access-key-not-found-code-40110000/4687/6 "2021-03-01T05:23:16Z")

</div>

Gotcha! The problem is you’re passing in the keys as query parameters within the URL, when actually [Alpaca’s keys need to be passed in as header parameters](https://alpaca.markets/docs/api-documentation/api-v2/#authentication).

So in Postman, just enter the keys under the Headers tab instead of the Params tab:

![](https://us1.discourse-cdn.com/flex020/uploads/alp/original/2X/f/fefeb9420cf46f24b0471f0d3c090c92f09665b8.png)