What is Proof of Key Code Exchange or PKCE? Proof of Key Code Exchange, or PKCE, is an extension to the OAuth2 authorization code flow that provides additional security for public client applications.