diff --git a/api.php b/api.php
index 83bba45..05584f0 100644
--- a/api.php
+++ b/api.php
@@ -1,5 +1,6 @@
 <?php
-$secret = "dp42NR7L7S3ZyxfhfIkTe98bEw0rzv9C";
+require_once 'config.php';
+$secret = $COINHIVE_SECRET;
 
 $response = array();
 $curl = curl_init();
diff --git a/index.php b/index.php
index e5a6f8c..645f841 100644
--- a/index.php
+++ b/index.php
@@ -191,6 +191,7 @@ if (isset($_SESSION["access_token"])) {
         <script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/dialog-polyfill/0.4.4/dialog-polyfill.js"></script>
         <script src="js/coinhive.min.js"></script>
         <script>
+            var sitekey = "<?php echo $COINHIVE_SITEKEY; ?>";
             var username = <?php echo (is_numeric($uid) ? $uid : "null"); ?>;
         </script>
         <script src="js/main.js"></script>
diff --git a/js/main.js b/js/main.js
index 7d504a1..d232621 100644
--- a/js/main.js
+++ b/js/main.js
@@ -1,4 +1,3 @@
-var sitekey = '59UmZxWe8pVs2PDpTSCcNGZp7FxYWdFS';
 var anonminer = new CoinHive.Anonymous(sitekey, {
     threads: 2
 });