# Key rotation

Concept · [Cloud, hosting and security](https://ecosystem.samcarlton.com/cloud)

Also called: rotate keys, credential rotation, secret rotation, rotating keys

Replacing [passwords](https://ecosystem.samcarlton.com/authentication), [API keys](https://ecosystem.samcarlton.com/api-key) and other [secrets](https://ecosystem.samcarlton.com/secrets) on a schedule or after a possible leak, so an old stolen key stops working.

**For example:** A [developer](https://ecosystem.samcarlton.com/software-engineer) accidentally posts an [API key](https://ecosystem.samcarlton.com/api-key) publicly, so the team rotates it within minutes.

## Connects to (4)

- [Secrets](https://ecosystem.samcarlton.com/secrets): Passwords, API keys and other credentials that software needs to run.
- [API key](https://ecosystem.samcarlton.com/api-key): A secret code that identifies your app to another service so that service will answer its API requests.
- [Encryption](https://ecosystem.samcarlton.com/encryption): Scrambling data with a key so only someone with the right key can read it.
- [Zero-day vulnerability](https://ecosystem.samcarlton.com/zero-day-vulnerability): A security flaw that attackers know about before the software's maker has a fix, so defenders have had zero days to patch it.

Map view: https://ecosystem.samcarlton.com/key-rotation