Skip to content

Wistia API Key

Service Name: Wistia

Service Description: Wistia is a video hosting platform designed for businesses. It provides advanced analytics, marketing tools, and customization options for video content, helping businesses leverage video for marketing, sales, and internal communications.

Service Address: https://wistia.com/

Validation Type: API Auth

IP Allow list: Does not exist at the API key level, but Wistia offers domain restrictions for video access.

Secret Access Scope: Grants programmatic access to Wistia's API, allowing management of video content, access to analytics data, and control over account settings.

Secret Revokement URL: https://my.wistia.com/account/api

Secret Example: wistia_api_key_123456789abcdef0123456789abcdef0123456

Suspicious Activity Investigation Instructions:

  • Review Wistia account activity logs for unusual video uploads, deletions, or modifications.
  • Check for unexpected changes to video privacy settings or domain restrictions.
  • Monitor for unusual API calls, especially those related to account settings or video management.
  • Verify if there are any new integrations or third-party connections established.
  • Review analytics data for unusual viewing patterns or access from unexpected locations.

Mitigation Instructions:

  • Log in to your Wistia account and navigate to Account > Settings > API Access.
  • Revoke the compromised API key by clicking the "Revoke" button next to it.
  • Generate a new API key if needed for legitimate applications.
  • Review and update any applications or integrations that were using the old key.
  • Consider implementing domain restrictions for your videos if not already in place.
  • Review account users and remove any unauthorized access.
  • Enable two-factor authentication for your Wistia account if available.