Airbnb API key not unique per user : <p>I have been researching the Airbnb API and have started working with it and making some requests. Some API calls such as calendar_months require an API key:
<a href="https://www.airbnb.com/api/v2/calendar_months?key=your_api_key&amp;listing_id=17794278&amp;_format=with_price" rel="noreferrer">https://www.airbnb.com/api/v2/calendar_months?key=your_api_key&amp;listing_id=17794278&amp;_format=with_price</a></p>

<p>I know that your API key can be found in the meta tags, or by inspecting requests in the browser (<a href="https://stackoverflow.com/questions/38243819/how-to-acquire-api-key-for-airbnb">How to acquire API key for Airbnb</a>). This is fine, and I've successfully located my API key. </p>

<p>My concern is that this key does not appear to be unique. I've retrieved the API key from multiple computers on multiple networks with separate IP addresses -- even from a server in another country with no association to my previous Airbnb activity. I always find the same API key: d306zoyjsyarp7ifhu67rjxn52tv0t20</p>

<p>I'd normally never post the key for my account somewhere (obviously), but it's clear that this API key is not unique to me. A quick google search shows that many people are already using it:
<a href="https://www.google.com/search?q=d306zoyjsyarp7ifhu67rjxn52tv0t20" rel="noreferrer">https://www.google.com/search?q=d306zoyjsyarp7ifhu67rjxn52tv0t20</a></p>

<p>You can find the same situation with API key 3092nxybyb0otqw18e8nh5nty. This one I initially found in the old unofficial airbnb api docs (<a href="https://stackoverflow.com/questions/44107282/does-you-have-a-copy-of-a-documentation-of-unofficial-airbnb-api">Does you have a copy of a documentation of unofficial AirBnb API?</a>) so it's understandable that some people might have found it there and started using it. </p>

<p>I've searched extensively to find some discussion on this, but I can't find anything and I have a number of questions about this: </p>

<ul>
<li>Look up your own API key and do a google search for it -- is anyone else sharing your key? </li>
<li>Do you receive different keys on separate computers / networks? </li>
<li>Why would Airbnb require a key for certain requests, if the key does not to uniquely identify the user? </li>
<li>Is there something I'm overlooking which would allow them to identify me even though many people are sharing this key? </li>
<li>How can I acquire a truly unique API key? </li>
<li>Why is no one talking about this?</li>
</ul>

<p>Thanks!</p>
