[question] api_secret visible when we put in params

Hellou, i would like to know where to put api_secret key, if i put in params it visible to every user.
So my questions is where to put api_secret it should not be visible to everyone right ?