Rotate API Keys

Input Parameters

old_api_key

new_api_key

target_directories

Procedure

1. Ask for the old and new API keys if not provided
2. Identify all target files — .env files, keystore files (

   keys.json

   ), and logs containing credentials:
   bash

   find {{SEARCH_PATH}} -name "*.env" -o -name "keys.json" -o -name "*.log"

3. Create backups and replace the key in each file:
   bash

   sed -i.bak "s|{{OLD_KEY}}|{{NEW_KEY}}|g" {{FILE_PATH}}

4. Verify the replacement in a sample of updated files:
   bash

   grep -o "sk-[a-zA-Z0-9-]*" {{FILE_PATH}} | head -1

5. Report a summary of all updated files, backup locations, and verification results

Notes

• Backups are created automatically using the

  -i.bak

  flag before any changes
• Verify replacements before confirming completion
• Revoke the old key in the API provider's dashboard after rotation
• Large log files may take time to process

Example

rotate my API key across all my projects and config files
replace my old OpenAI key with a new one in all .env files
update this API key everywhere it appears on my system
rotate my compromised API key across all config files and keystores
refresh my API credentials across my development environment