---
schema_version: "1"
id: 95b96ec69796c4ff7e5dcc3eba572bad14cd13562590af26c4e3c4987860d150
title: Improve Security and Authentication Success with API Client Public Key Validation
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/b2c_rn_am_public_key_validation.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.b2c_rn_am_public_key_validation.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 76ce5b6928f7ae96a115bf31170afa2f5eba244929c99552ed713b0d437af288
description: Account Manager now verifies the Client JSON Web Token (JWT) Bearer Public Key field in API client configurations to prevent authentication failures and improve system security. You can input a PEM-formatted certificate or a Base64-encoded RSA public key (for B2C Commerce only), with or without headers. The system checks for correct formatting and valid cryptographic material. You can still create API clients without JWT public keys if public keys aren’t needed for your use case.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Improve Security and Authentication Success with API Client Public Key Validation

Account Manager now verifies the Client JSON Web Token (JWT) Bearer Public Key field in API client configurations to prevent authentication failures and improve system security. You can input a PEM-formatted certificate or a Base64-encoded RSA public key (for B2C Commerce only), with or without headers. The system checks for correct formatting and valid cryptographic material. You can still create API clients without JWT public keys if public keys aren’t needed for your use case.

**Where:** This change applies to Account Manager for B2C Commerce.

#### See Also

- [_Salesforce Help_: Add an API Client in B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_account_manager_add_api_client_id.htm&language=en_US)