---
title: "Rotating Your Plugin Keys"
source_url: https://docs.rapyd.net/en/rotating-your-plugin-keys.html
lang: en
---

# Rotating Your Plugin Keys

A guide to rotating your Plugin Keys in Client Portal

You can rotate your Plugin API Keys in the Client Portal if your Plugin API keys in sandbox or production were compromised, or if you wished to rotate the API keys regularly. You must have Owner permissions to rotate your plugin API keys.

For example, if you experienced a security breach where your plugin API keys had been exposed to the public, you can rotate your plugin API keys. This allows you to use new plugin API keys.

## How to Rotate Plugin API Keys

1. Sign in as described in [Accessing the Client Portal](https://docs.rapyd.net/en/accessing-the-client-portal.md "Accessing the Client Portal") and navigate to **Settings** > **Plugins**.

   The **Plugins** page appears.

   ![image3.png](image/img-d0c84dd2837367b890c592fcdf3cf321.png)
2. Select the desired plugin.
3. The Plugin details page appears.

   ![image7.png](image/img-c7eeb3c0fb33a171cd76b4d16dfc84de.png)
4. Click the **Rotate API keys** button in the upper right corner.
5. The **Choose when to revoke the existing key** dialogue box appears.

   ![image2.png](image/img-8f2eeceed26be8e34510ba67a2efc65b.png)
6. Select the time frame when you would like to rotate your API Keys in the drop-down. The time frame ranges from Now to 7 Days.

   ![image8.png](image/img-398a60197ef17651f0d1348d69c3546d.png)
7. Click **Next**.
8. The **Warning!** dialogue box appears.

   ![image5.png](image/img-4b4bb802d0505e79e1897ae0c2be0201.png)

   > **Note:**
   >
   > Make sure to update any script or program with the new API Keys, and accept Webhooks with either the new or previous API keys until the previous API keys are revoked. Not updating such scripts on time will prevent any payments that used the previous API keys.
9. Click the checkbox that says **I confirm rotating the API keys**.

   ![image1.png](image/img-15468468965336151c3839d249ae358b.png)
10. Click **Next**.

    The Two Factor Authentication dialogue box appears.

    ![rotate-plugin-keys-flow-7.png](image/img-7c8c35bc6f164c8384d1ce6e460edd6f.png)
11. Enter your 6-digit SMS code.
12. Click **Submit**.

    The confirmation window appears.

    ![rotate-plugin-keys-flow-8.png](image/img-a79f6f57d4d188ce337001fc2a8f1f4e.png)
13. An email notification will inform you the API keys have been rotated, and state when the previous API keys expire. The notification will be sent to users who have permission to view the API Keys.