🛡️ Security

Secret Rotation

The practice of replacing credentials, keys and tokens with new values and invalidating the old ones, either on a schedule or after a suspected exposure. Rotation limits how long a leaked secret stays useful to an attacker.

📚 Deep Dive

Learn Article

How to Rotate Every Secret an Arbitrary File-Read Bug Could Have Exposed

Patching closes the hole; it does nothing about the credentials that leaked while it was open. A runbook for scoping the exposure and rotating secrets in dependency order without locking yourself out.

intermediate 4 min read

Back to Glossary