Production domains
Every project needs one production domain. HumanProof checks the request origin before issuing challenges, and the same production domain cannot be reused by another project in the same organization.
Testing domains
Add comma-separated testing domains for staging, DDEV, previews, or local tunnels. They do not replace the production domain.
Public test keys
Use test keys when you need a local integration without a project. Do not use them for production traffic.
Local development
For local HTTPS certificate issues, either trust the local certificate in your server runtime or use the public test keys while building the integration.