---
metadata:
  - name: generator
    content: Diplodoc Platform v5.44.0
alternate:
  - https://yandex.com/dev/id/doc/en/tips.md
  - https://yandex.com/dev/id/doc/ru/tips.md
---
> **Documentation Index:** Fetch the complete configuration index at https://yandex.com/dev/id/doc/en/llms.txt

# Best practices for using the Yandex ID API

If you use the Yandex ID API, your app must be secure for users. To ensure the confidentiality of user data, follow these recommendations:

* Before integration, make sure that your app complies with the [Yandex OAuth Program Requirements](https://yandex.com/legal/authid_api/en/).

* Use separate projects for testing and production. Don't include both testing and production `redirect_uri` values in a single app. Test apps, just like production ones, must comply with the service's Terms of Use.

* Make sure you have provided a valid email address. You'll receive important emails about your app and any Yandex ID API updates at this address. 

    {% note tip %}

    To change your contact details, go to the app's settings in your [OAuth](https://oauth.yandex.ru/) account. Make sure you've entered the correct app name and added an icon. Users will see this information on the permissions screen.

    {% endnote %}

* Request only the permissions that your app can't function without. 

* To create apps without restrictions, [verify](https://yandex.com/dev/id/doc/en/confirm-account.md) your account.

* If you're registering an [Android](https://yandex.com/dev/id/doc/en/mobileauthsdk/android/3.1.3/sdk-android-use.md) or [iOS](https://yandex.com/dev/id/doc/en/mobileauthsdk/ios/sdk-ios-main.md) app, please specify all `package name` values (for Android) or `app_id` values (for iOS) that are required for user authorization.