What is required to comply with the new Stripe authentication requirements?

Previously, Stripe allowed third-party plugins to request the standard API keys of a user to integrate with their products. Since January 2024, Stripe requires plugins to leverage Stripe Apps. All new and existing plugins must use a Stripe App to authenticate users for their service using OAuth 2.0 or a restricted API key.

If you have an existing extension, migrate to the standard Stripe Apps integration path for security and compliance purposes. Migrating an existing extension to a Stripe App integration only requires you to change your plugin’s authentication method.

App for Payments with Stripe for Magento 2 extension supports restricted API key authentication method.