Rotating an API token changes the token's secret to prevent security breaches by invalidating the old token's secret and activates a new one. You may, for example, want to rotate an expired API token to effectively re-enable it. API tokens can also be rotated when they are still Enabled if, for example, you think its security may be compromised.
Disabled tokens cannot be rotated.
To rotate an API token:
- Navigate to and locate the expired API token you want to rotate in the list.
- Select the ellipses in the row and then select Rotate.
- In the dialog, select Rotate.
The selected API token will be rotated. If a validity period was set for the API token, it will be reset. For example, if the token originally had a validity period of 30 days, the rotated token will expire 30 days after it is rotated.