Guides
Rotate a leaked key
Change the value once, find out who read the old one, and expire the token that leaked it.
About 5 minutes
- 01
Replace the value
Set the new value. Every process that starts from now on gets it.
Terminalenvlet set STRIPE_KEY=sk_live_new... - 02
Read the audit log
The activity page lists everyone who read STRIPE_KEY and when. Values are never in the log, so you can share the list.
- 03
Expire the token
If a token leaked, revoke it. A token opens one environment, so that is the whole blast radius.