Rotate an API key

Rotation replaces a key's secret value with a new one. Use it if a key may be leaked, or as a regular security routine.

How to do it

1. Go to API keys (avatar → My API keys) and find the key you want to rotate.
2. Click the rotate icon (Rotate API key) — in the list or on the key's own page.
3. Click Send code. For security we send a 6-digit code to your email. Enter the code.
4. Click Confirm & rotate — a new key value is shown (only once). Copy it. The key's setup and statistics are kept.

⚠️ Important to know

The old key stops working immediately. Any integration still using it will get 401 Unauthorized.

So plan the rotation:

1. Create/rotate to the new key.
2. Update the key in all your apps, servers, webhooks and cron jobs.
3. Confirm everything runs on the new key.

If several systems share one key, consider giving each system its own key instead, so you can rotate one at a time with no downtime.