Rotate
Replace a key with a new one, then delete the old one so it stops working
Words that go with it
- LeakA secret ending up anywhere other than .env.local, Vercel or your password manager
- Publishable keyA Supabase key designed to be public; it can only do what your database rules allow
- Push protectionA GitHub feature that blocks a push when it spots a secret
- RedactReplace a secret with [REDACTED] before sharing text
- RevokeDelete or switch off a key so it no longer works
- Secret keyA Supabase key that skips your database rules. Server only, never shared