How to Get a Gemini API Key (2026 Developer Setup Guide)

Integrating Google’s Gemini API into your applications requires a valid API key issued through Google AI Studio or Google Cloud Vertex AI. This guide provides a step-by-step walkthrough on generating your key, configuring environment variables, setting up billing limits, and preventing unauthorized quota usage.

What Is a Gemini API Key?

A Gemini API key is a unique 39-character alphanumeric string that authenticates your client application with Google’s Gemini 1.5, 2.0, and 3.x model endpoints. It links your requests to a specific Google AI Studio project for rate limiting, quota tracking, and access management.

AIzaSyD-ExampleGeminiApiKeyString_2026xY

Step 1: Create a Google AI Studio Project

1. Navigate to Google AI Studio.
2. Log in with your standard Google Workspace or Gmail account.
3. In the left navigation menu, click Get API Key.
4. Click Create API Key in New Project (or select an existing Google Cloud Console project).
5. Copy the generated API key immediately and store it securely.

[!IMPORTANT] Google AI Studio provides free API keys for prototyping with Gemini 1.5 Flash and Gemini 2.0 Flash models subject to rate limits.

Step 2: Configure Environment Variables

Never hardcode your API key directly in source code or commit it to public GitHub repositories. Use .env configuration files.

For Node.js / JavaScript

Install the official Google Gen AI SDK:

npm install @google/genai

Create a .env file in your project root:

GEMINI_API_KEY="AIzaSyYourGeneratedKeyHere"

Access the key securely in code:

import { GoogleGenAI } from '@google/genai';

const ai = new GoogleGenAI({ apiKey: process.env.GEMINI_API_KEY });
const response = await ai.models.generateContent({
  model: 'gemini-2.0-flash',
  contents: 'Explain quantum computing in 2 sentences.',
});

console.log(response.text);

For Python

Install the Python SDK:

pip install google-genai

Set environment variables in PowerShell or Bash:

export GEMINI_API_KEY="AIzaSyYourGeneratedKeyHere"

Run Python code:

import os
from google import genai

client = genai.Client(api_key=os.environ.get("GEMINI_API_KEY"))

response = client.models.generate_content(
    model="gemini-2.0-flash",
    contents="Write a 3-line Python function to reverse a string."
)

print(response.text)

Gemini API Key Security Best Practices

1. Restrict HTTP Referrers & IP Addresses: In Google Cloud Console, restrict your API key to only accept requests originating from your production domain or server IPs.
2. Use Secret Managers in Production: When deploying to Vercel, AWS Lambda, or Cloudflare Workers, store the API key in environment secrets rather than static configuration files.
3. Rotate Keys Regularly: Set a 90-day key rotation policy for enterprise applications.

FAQ

Is the Gemini API Key free?

Yes! Google AI Studio offers a free tier allowing up to 15 Requests Per Minute (RPM) and 1,000,000 Tokens Per Minute (TPM) on Gemini 1.5 Flash and Gemini 2.0 Flash.

Why do I get a 403 Forbidden error?

A 403 error occurs if your key is restricted to specific IP addresses/referrers that do not match your current client, or if API access has not been enabled for your Google Cloud billing account.