Announcing security updates to the Public API Network: new secret-protection policy

We are humbled by the global adoption of Postman’s Public API Network in recent years. Having grown from just a few hundred…

Happier times: companies share how Postman improves developer experience

No one needs friction, especially when you’re working, whether it’s tasks being repeated or out-of-date APIs being shared. With the Postman API…

Updates to the Postman Secret Scanner

In today’s fast-paced and interconnected world, we must prioritize data security to protect our sensitive information from potential threats. Here at Postman,…

Manage exposed secrets with the Postman Enterprise Essentials plan

Sensitive data and credentials pose significant challenges to an organization’s security. Without proper safeguards in place, organizations are at risk of compromising…

What is JWT?

JWT, which stands for JSON Web Token, is an open standard for securely sharing JSON data between parties. The data is encoded…

Introducing Atlassian’s ASAP authentication in Postman

In the ever-evolving landscape of API development and testing, Postman aims to consistently ensure you have the right set of tools for…

What is PKCE?

PKCE, which stands for “Proof of Key Code Exchange” and is pronounced “pixy,” is an extension of the OAuth 2.0 protocol that…

What is OpenID Connect?

OpenID Connect (OIDC) is an authentication protocol that adds an identity layer on top of OAuth 2.0. It helps securely authenticate users…

Announcing the Postman Secret Scanner for team workspaces

The Postman Secret Scanner has been providing invaluable assistance in securing your publicly accessible data on Postman. Also, our partnership with GitHub…

Manage publicly exposed Postman API keys

Postman API keys provide access to the Postman user’s and team’s data. When Postman API keys are exposed in Postman public elements,…

Testing APIs in Postman using advanced OAuth flows

This is a guest post written by Jonas Inggbom, director of sales engineering at Curity. These days, it’s not uncommon for testers…

What is OAuth 2.0?

OAuth 2.0 is an authorization framework that enables users to safely share their data between different applications. It is an industry standard…