How do I rotate an API key without downtime?

Rotating means replacing a key with a new one. The Console doesn't have a single "rotate" button; you do it in four steps so nothing breaks:

1. Create the new key with the same permissions and rate limit. Give it a name that shows it's the new one, like "Backend (2026-11)".
2. Deploy it: update your app's secret settings and restart or redeploy.
3. Check the switch: in API keys, watch Last used. The new key should show recent use, and the old one should stop changing.
4. Revoke the old key.

When to rotate#

• Right away if a key may have leaked (then revoke first, replace second).
• Before an expiring key's date.
• When someone who had access to it leaves your company.
• On a regular schedule your company sets.

Remember the 25-key limit: during a rotation you briefly have both keys active.

Learn more#

• API keys guide
• Rate limits
• Console › API keys

Still need help?#

• General support: support@clatterlabs.com or team@clatterlabs.xyz
• Infrastructure questions, or permanent deletion of your data (your whole account or one service): infrastructure@clatterlabs.xyz

We usually reply within the first hour, and always within 24 hours. A full support team is with you.