Skip to main content
Rotating credentials immediately revokes your existing client secret and generates a new one. This helps protect your account if your credentials have been leaked, compromised, or shared unintentionally. Once rotated, the old client secret and all active access tokens become invalid, and your systems must be updated with the new secret to restore access.
1

Open the Developer portal

2

Select your application

  • From the list of applications, click the one whose credentials you want to rotate
  • The Application Details panel opens on the right
3

Complete the rotation

  • Click Rotate Credential
  • A confirmation modal appears explaining the impact of rotation
  • Type ROTATE into the confirmation field
  • Click Confirm to proceed
    The previous client secret and all associated access tokens are revoked immediately
4

Update your systems with the new client secret

  • Copy the new secret from the confirmation — like a new application’s secret, it is shown once
  • Replace the old secret in all configurations or integrations that use it, including any Power Automate connections or Zapier connections
    API access will fail until your systems are updated (some downtime is expected)