Security keys

A security key or token enables other systems to access Moodle securely. A security key may be used for secure RSS feeds or web services.

A user can obtain a security key via Settings > My profile settings > Security keys then enter the key in an external application accessing Moodle.

At any time, a user can reset their key by clicking the reset link. A new different key is automatically generate which will then need to be entered in the external application.

Note: The security keys page can not generate web service keys/tokens for admins. Admins can create a token manually from the administration block: Settings > Site administration > Plugins > Web services > Manage tokens.

Secure RSS feeds

Secure RSS feeds are a way you can read forum posts, blog entries, etc while you are offline, and without having to log in. For example, if you want to read the posts in a forum, you usually need to log in to Moodle. But if your site administrator has enabled RSS, these posts are available as a feed you can subscribe to with a feed reader, and you can read entries even when you don't have access to the Internet.

Secure RSS feeds allow your feed reader, which usually expects feeds to be publicly available, to download material from Moodle without having to log in.

Whenever you are viewing an activity that provides an RSS feed, look in the "Settings" block for a link labelled "RSS feed of posts". This link is unique to your Moodle account. Paste it into your feed reader to have it obtain new entries for you automatically.

If you ever think your RSS feed token has been compromised in some way, e.g. you have lost a mobile phone that subscribed to a news forum, you can request a new one by clicking the Reset link on the Security Keys page in your Moodle profile. This will disable the old feed token and generate a new one. You can then visit the activities you wish to subscribe to and copy the URL, which will contain your new security key.