> ## Documentation Index
> Fetch the complete documentation index at: https://docs.coreweave.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How do I generate storage access keys?

Generate an access key from the [Access Keys page](https://console.coreweave.com/object-storage/access-keys) in the CoreWeave Cloud Console. You can create either a permanent key (does not expire, requires manual rotation) or a temporary key (expires after a set duration, up to 12 hours). Each key is a pair of an access key ID and a secret key. Capture the secret value when it is shown in the create response and store it in a secrets manager. Creating an access key requires either the `Object Storage Admin` IAM role or the `cwobject:CreateAccessKey` action granted through an organization access policy.

For production workloads, use [Workload Identity Federation](/products/storage/object-storage/auth-access/workload-identity-federation/about) instead of Cloud Console keys. WIF issues short-lived keys from your identity provider, so credentials never need to be stored or rotated.

For full setup steps, see [Create access keys](/products/storage/object-storage/auth-access/manage-access-keys/create-keys).

***

<Badge stroke shape="pill" color="blue" size="md">[Administrator](/support/storage/tags/administrator)</Badge><Badge stroke shape="pill" color="blue" size="md">[Authentication & Access](/support/storage/tags/authentication-access)</Badge>