Backend & systems·Security and identity
you replace the API key on a schedule, which means the system must tolerate two valid keys at once during the changeover.
Secret rotation
Also calledcredential rotation, key rotation
Periodically replacing credentials so that an undetected leak has a bounded lifetime. The mechanism that makes it possible is overlap: accept both old and new during a window, or every rotation is an outage. A secret that cannot be rotated without downtime will not be rotated.