Reference · Glossary

Secrets rotation

Regularly **replacing credentials** — API keys, DB passwords, signing secrets — without service downtime.

#When to use

Compliance schedules, post-incident response, and limiting blast radius of stale keys.

Rotating in one step without dual-key windows — that causes outages.

Issue `OPENAI_API_KEY_v2`, deploy all services, monitor 24h, then revoke `v1`.