Answer an API key reset request

API key resets are a security moment. Verify first, rotate cleanly and tell the customer what to update.

Last reviewed October 14, 2026

Verify the requester

Confirm they are an admin on the account before changing anything.

Explain that the old key stops working at once or at a set time.

Offer a grace period if your system allows two keys.

Tell them to replace the key in every service that uses it.

If the key leaked, ask where and check recent usage.

Follow up after a day to check calls are succeeding.

No. Point them to the dashboard where they can copy it.

Ask an admin on the account to make the request.

No. It can explain the steps. Resets should happen in the product.

Written by Flatdesk, a help desk for small support teams at one flat price per agent. Try it free for 14 days, no card.