How to rotate an Alchemy API key

Last updated: August 25, 2026

Rotating an API key replaces the key for an existing app while keeping the app itself unchanged. Rotate a key immediately if it may have been exposed, or as part of your regular security process.

Important: You must be a team admin to rotate an API key. The previous key stops working within two minutes after rotation, so plan the change before you begin.

Before you rotate

Identify every place that uses the current key, including backend environment variables, frontend or mobile configuration, serverless functions, CI/CD secrets, monitoring or data pipelines, and local development configuration.

Rotate your API key

  1. Open the Alchemy Dashboard and select the app whose key you want to rotate.

  2. Open the App Settings tab.

  3. In the Rotate API key section, click Rotate API key.

  4. Review the warning and click Rotate API key again to confirm. This action cannot be undone.

  5. Copy the new API key and update every integration that used the previous key.

If you do not see the Rotate API key section, API key rotation may not be enabled for your team yet. Contact your team admin or Alchemy Support.

After you rotate

  • Make a test request with the new key.

  • Replace the old key in your secrets manager, CI/CD settings, and local configuration.

  • Redeploy or restart services that read the key at startup.

  • Review recent requests and errors to confirm traffic is using the new key.

Your app settings, history, and usage data are not affected by an API key rotation. API key rotations are recorded in the Dashboard activity log.

For more detail, see How to Rotate API Keys in the Alchemy Docs.