Skip to content

Wakatime Personal Project Secret

Service Name: WakaTime

Service Description: WakaTime is a developer productivity and time tracking tool that automatically tracks coding activity and provides insights into programming time, languages used, and projects worked on. It integrates with various code editors and IDEs.

Service Address: https://wakatime.com/

Validation Type: -

IP Allow list: Does not exist

Secret Access Scope: Grants access to a user's WakaTime account, allowing API access to view and manage time tracking data, projects, and account settings.

Secret Revokement URL: https://wakatime.com/settings/api-key

Secret Example: waka_1234abcd-5678-90ef-ghij-klmnopqrstuv

Suspicious Activity Investigation Instructions:

  • Review the WakaTime dashboard for any unauthorized project access or modifications
  • Check API usage logs for unusual patterns or access from unfamiliar locations
  • Monitor for unexpected changes to account settings or integrations
  • Verify if any new editor plugins or integrations have been added without authorization
  • Review recent activity timeline for anomalies in tracked time or projects

Mitigation Instructions:

  • Log in to your WakaTime account at https://wakatime.com/

  • Navigate to Settings → API Key

  • Click "Generate New API Key" to invalidate the old key

  • Update the API key in all legitimate integrations and editor plugins
  • Review and remove any unauthorized integrations or applications
  • Enable two-factor authentication if available
  • Consider reviewing your editor plugins to ensure they haven't been

compromised