in laymen terms, an API key is a way for 2 websites to talk to each other.. so I have a server and it talks to the exchanges server through an API ( Automated Programming Interface). The fuck Cryptosparks believes its the same as a bitcoin private Key. 

(there is fuck ton more to it but thats a basic concept for you bud)  don't merit me for it