diff --git a/donate/app.py b/donate/app.py
index 4ca4d78..220a9ce 100644
--- a/donate/app.py
+++ b/donate/app.py
@@ -13,7 +13,10 @@
     User,
 )
 from donate.vendor.stripe import _get_stripe_key as get_stripe_key
-from donate import routes
+from donate import (
+    routes,
+    nonce
+)
 
 
 def create_app(config_object=ProdConfig):
@@ -51,6 +54,7 @@ def register_blueprints(app):
     app.register_blueprint(routes.new_project_page)
     app.register_blueprint(routes.thanks_page)
     app.register_blueprint(routes.donation_charges)
+    app.register_blueprint(nonce.nonce_page)
 
 
 def register_shellcontext(app):
diff --git a/donate/models.py b/donate/models.py
index 54a7dae..e0502b4 100644
--- a/donate/models.py
+++ b/donate/models.py
@@ -290,6 +290,6 @@ class DonateConfiguration(db.Model, TimestampMixin):
     __tablename__ = 'donate_configuration'
 
     id = db.Column(db.Integer, primary_key=True)
-    key = db.Column(db.String(32), nullable=False, unique=True)
+    key = db.Column(db.String(64), nullable=False, unique=True)
     type = db.Column(db.String(10), nullable=False)
     value = db.Column(db.String(32), nullable=False)
diff --git a/donate/nonce.py b/donate/nonce.py
new file mode 100644
index 0000000..3cb7411
--- /dev/null
+++ b/donate/nonce.py
@@ -0,0 +1,56 @@
+import random
+import string
+from datetime import datetime
+
+from donate.models import DonateConfiguration
+from donate.extensions import db
+from flask import (
+    current_app as app,
+    make_response,
+    render_template,
+    Blueprint,
+)
+
+
+nonce_page = Blueprint('nonce', __name__, template_folder="templates")
+
+
+@nonce_page.route('/nonce/<nonce>', methods=['GET'])
+def denonce(nonce):
+    data = {'value': consume_nonce(nonce)}
+    resp = make_response(render_template('nonce.html', data=data))
+    resp.headers['Content-type'] = 'application/json'
+    return resp
+
+
+def create_nonce():
+    nonce = ''.join(random.choice(string.ascii_letters + string.digits)
+                    for n in range(256))
+    db.session.add(DonateConfiguration(key=nonce, type="nonce", value="true"))
+    db.session.commit()
+    return nonce
+
+
+def consume_nonce(nonce):
+    nonces = db.session.query(DonateConfiguration).filter_by(
+        key=nonce,
+        type="nonce",
+        value="true").all()
+
+    if len(nonces) == 0:
+        return None
+
+    if len(nonces) == 1:
+        nonce = nonces[0]
+        if (datetime.now() - nonce.created_at).total_seconds() <= 60:
+            key = app.get_stripe_key('PUBLIC')
+        for nonce in nonces:
+            db.session.delete(nonce)
+        db.session.commit()
+        return key
+
+    if len(nonces) > 1:
+        for nonce in nonces:
+            db.session.delete(nonce)
+        db.session.commit()
+        return None
diff --git a/donate/routes.py b/donate/routes.py
index afdaaf1..598007f 100644
--- a/donate/routes.py
+++ b/donate/routes.py
@@ -30,7 +30,7 @@
     create_charge,
     get_customer
 )
-
+from donate.nonce import create_nonce
 import stripe
 from stripe import error as se
 
@@ -250,7 +250,7 @@ def index():
 
     # donations = db.session.query(Donation).limit(10)
     donations = []
-    STRIPE_KEY = app.get_stripe_key('PUBLIC')
+    nonce = create_nonce()
 
     return render_template('main.html',
                            data={
@@ -258,7 +258,7 @@ def index():
                                'repo_path': repo_path,
                                'recent_donations': donations,
                                'projects': sorted_projects,
-                               'stripe_pk': STRIPE_KEY
+                               'nonce': nonce
                            })
 
 
diff --git a/donate/static/js/helper.js b/donate/static/js/helper.js
new file mode 100644
index 0000000..ea977f2
--- /dev/null
+++ b/donate/static/js/helper.js
@@ -0,0 +1,19 @@
+
+
+function donateHttpGetAsync(value, cback)
+{
+    var xhttp = new XMLHttpRequest();
+    xhttp.onreadystatechange = function() {
+        if (this.readyState == 4 && this.status == 200) {
+            cback(this);
+        }
+    }
+    xhttp.open("GET", "nonce/"+value, true);
+    xhttp.send();
+}
+
+function initStripe(xhttp) {
+    // var data = document.getElementById('special-thing');
+    var data = JSON.parse(xhttp.responseText);
+    stripe = Stripe.setPublishableKey(data);
+}
diff --git a/donate/templates/base.html b/donate/templates/base.html
index c4dd375..84d1c6e 100644
--- a/donate/templates/base.html
+++ b/donate/templates/base.html
@@ -27,6 +27,7 @@
       {% block head_css_page %}{% endblock head_css_page %}
     {% endblock head_css %}
     {% block head_script_section %}
+      <script src="{{ url_for('static', filename='js/helper.js') }}"></script>
       <script src="https://js.stripe.com/v2/"></script>
       <!-- script>
         var stripe = Stripe.setPublishableKey({# {{ data.stripe_pk }}) #}
@@ -59,7 +60,6 @@
     <script src="//maxcdn.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js"></script>
 
     <!-- Internal scripts -->
-    <!-- script>Stripe.setPublishableKey("{{ data.stripe_pk }}");</script -->
     <script src="{{ url_for('static', filename='js/donate.js') }}"></script>
 
   </body>
diff --git a/donate/templates/main.html b/donate/templates/main.html
index ffe04a0..f04e046 100644
--- a/donate/templates/main.html
+++ b/donate/templates/main.html
@@ -2,7 +2,8 @@
 {% block head_script_section %}
   {{ super() }}
   <script>
-    var stripe = Stripe.setPublishableKey("{{ data.stripe_pk }}")
+    var stripe = "asdf";
+    donateHttpGetAsync("{{ data.nonce }}", initStripe, stripe)
   </script>
 {% endblock %}
 {% block content %}
diff --git a/donate/templates/nonce.html b/donate/templates/nonce.html
new file mode 100644
index 0000000..0ec6187
--- /dev/null
+++ b/donate/templates/nonce.html
@@ -0,0 +1,3 @@
+{% block content %}
+{{ data.value | tojson }}
+{% endblock %}