Here are some of the most common ways you can strengthen your API security: Use tokens. Establish trusted identities and then control access to services and resources by using tokens assigned to those identities. Use encryption and signatures. ... Identify vulnerabilities. ... Use quotas and throttling. ... Use an API gateway. Jan 8, 2019