# security.xml

The **mandatory** file `security.xml` under the application directory comprises of one or many secret keys, which are used to calculate hash keys. See: [Authentication](https://openendpoints.gitbook.io/doc/usage/authentication)

![security image](https://cdn.openendpoints.io/images/gitbook/security-xml-image.png)