# non-HubSpot forms - migrating to "Private Apps" from using API keys

**URL:** <https://community.hubspot.com/t/non-hubspot-forms-migrating-to-private-apps-from-using-api-keys/70130>\
**Category:** APIs & Integrations\
**Tags:** forms\
**Created:** [November 29, 2022, 7:08am UTC](https://community.hubspot.com/t/non-hubspot-forms-migrating-to-private-apps-from-using-api-keys/70130 "2022-11-29T07:08:37Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Chewie94](https://avatars.discourse-cdn.com/v4/letter/c/71e660/32.png) [@Chewie94](https://community.hubspot.com/u/Chewie94)\
**Post date:** [November 29, 2022, 7:08am UTC](https://community.hubspot.com/t/non-hubspot-forms-migrating-to-private-apps-from-using-api-keys/70130/1 "2022-11-29T07:08:37Z")

</div>

Hello there,  
Recently we start receiving messages in hubspot about detected API key in our portal and advice to migrate to Private Apps.

Our gatsby app is using olny non-HubSpot forms for tracking via **[gatsby-plugin-hubspot](https://www.gatsbyjs.com/plugins/gatsby-plugin-hubspot/)** and we’re not making any api calls programatically like being described [**here**.](https://developers.hubspot.com/docs/api/migrate-an-api-key-integration-to-a-private-app#update-the-authorization-method-of-your-integration-s-api-requests)  
Is there’s something that can be done in our case? If so, I would appreciate any information.  
Thanks in advance!

---

<div class="post-metadata">

**Author:** ![Jaycee\_Lewis](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/jaycee_lewis/32/61352_2.png) [@Jaycee\_Lewis](https://community.hubspot.com/u/Jaycee_Lewis)\
**Post date:** [November 30, 2022, 7:21pm UTC](https://community.hubspot.com/t/non-hubspot-forms-migrating-to-private-apps-from-using-api-keys/70130/2 "2022-11-30T19:21:36Z")

</div>

Hey, @Chewie94 👋 Are you confident the calls are coming from your form integration? I fully admit to not being a Gatsby expert. And it looks to only be injecting the tracking code to so the non-HubSpot Form option can function.

If you are also using the [Authenticated form submission API endpoint](https://legacydocs.hubspot.com/docs/methods/forms/submit_form_v3_authentication#:~:text=As%20this%20API%20is%20authenticated%2C), you may want to look there and update to a Private App if needed. And that may be an irrelevant suggestion without knowing more context.

Best,

Jaycee