Rotate API Key

1 min readUpdated 23 October 2026

Replace another user's Vultr API key without downtime: create the new key, switch workloads, then delete the old one.

Regularly rotating API keys is a critical security practice that reduces the risk of unauthorized access. A safe rotation process ensures your workloads keep running without downtime while you replace old keys with new ones.

Note

This guide covers managing API Keys for other users. You must have root or administrator account credentials in Vultr to perform these actions.

Follow this guide to rotate a specific user's API key using the Vultr Console or the Vultr API.

Navigate to Account and select Users under OTHER.
Select the user from the list and click the Edit User icon.
In User Access Tokens section, enter a Name, choose an API key Expiry option, and set the Expiry On date.
Click Add Key to create the new API key.
Update your applications, scripts, and automation to use the new API key.
After you confirm that workloads authenticate with the new key, delete the old key in User Access Tokens section.

0 Comments

Start the conversation

Be the first to comment and share your perspective with the community.

Rotate a Vultr API Key for Another User Without Downtime | Vultr Docs