Key rotation

An organization administrator rotates keys in MyRemotely. Rotation creates a new key and keeps the old key valid for up to 15 minutes. The old key can expire sooner if its normal expiry is closer.

1. Create the replacement key in MyRemotely.

2. Put the new key in your secret manager.

3. Deploy the integration with the new key.

4. Test one read request.

5. Revoke the old key when all instances use the new key.

The replacement keeps the current expiration policy by default. The administrator can instead choose 30 days, 90 days, 1 year, a custom duration from 1 to 3650 days, or Never expires during rotation. A never-expiring key remains rate-limited and valid only until it is rotated or revoked.

Treat an unexpected 401 as a signal to check expiry or revocation. Do not retry a rejected key in a tight loop.