title: Airbnb API key not unique per user
body: <p>I have been researching the Airbnb API and have started working with it and making some requests. Some API calls such as calendar_months require an API key:
  <a href="https://www.airbnb.com/api/v2/calendar_months?key=your_api_key&amp;listing_id=17794278&amp;_format=with_price" rel="noreferrer">https://www.airbnb.com/api/v2/calendar_months?key=your_api_key&amp;listing_id=17794278&amp;_format=with_price</a></p>
  
  <p>I know that your API key can be found in the meta tags, or by inspecting requests in the browser (<a href="https://stackoverflow.com/questions/38243819/how-to-acquire-api-key-for-airbnb">How to acquire API key for Airbnb</a>). This is fine, and I've successfully located my API key. </p>
  
  <p>My concern is that this key does not appear to be unique. I've retrieved the API key from multiple computers on multiple networks with separate IP addresses -- even from a server in another country with no association to my previous Airbnb activity. I always find the same API key: d306zoyjsyarp7ifhu67rjxn52tv0t20</p>
  
  <p>I'd normally never post the key for my account somewhere (obviously), but it's clear that this API key is not unique to me. A quick google search shows that many people are already using it:
  <a href="https://www.google.com/search?q=d306zoyjsyarp7ifhu67rjxn52tv0t20" rel="noreferrer">https://www.google.com/search?q=d306zoyjsyarp7ifhu67rjxn52tv0t20</a></p>
  
  <p>You can find the same situation with API key 3092nxybyb0otqw18e8nh5nty. This one I initially found in the old unofficial airbnb api docs (<a href="https://stackoverflow.com/questions/44107282/does-you-have-a-copy-of-a-documentation-of-unofficial-airbnb-api">Does you have a copy of a documentation of unofficial AirBnb API?</a>) so it's understandable that some people might have found it there and started using it. </p>
  
  <p>I've searched extensively to find some discussion on this, but I can't find anything and I have a number of questions about this: </p>
  
  <ul>
  <li>Look up your own API key and do a google search for it -- is anyone else sharing your key? </li>
  <li>Do you receive different keys on separate computers / networks? </li>
  <li>Why would Airbnb require a key for certain requests, if the key does not to uniquely identify the user? </li>
  <li>Is there something I'm overlooking which would allow them to identify me even though many people are sharing this key? </li>
  <li>How can I acquire a truly unique API key? </li>
  <li>Why is no one talking about this?</li>
  </ul>
  
  <p>Thanks!</p>