When generating the key, you can encrypt the key with a passphrase you provided: See the How to Generate an API Signing Key documentation for additional information.