# Manage your API keys and secret keys

Create, rotate, revoke, and delete API keys and secret keys.

Source: https://amplitude.com/docs/admin/account-management/manage-your-api-keys-and-secret-keys

---

On this page

- [Manage your keys](#manage-your-keys)
- [API key](#api-key)
- [Legacy API key](#legacy-api-key)
- [Generate an API key](#generate-an-api-key)
- [Revoke an API key](#revoke-an-api-key)
- [Secret key (Beta)](#secret-key-beta)
- [Generate a secret key](#generate-a-secret-key)
- [Delete a secret key](#delete-a-secret-key)
- [Limitations](#limitations)

# Manage your API keys and secret keys

Amplitude’s self-service key management page helps Managers and Admins create and revoke API keys, and create and delete secret keys. **All changes are permanent**.

You can:

- Create and name multiple API keys and secret keys.
- View a log of the creator and the last action taken on the key.
- Disable API access.

## Manage your keys

To manage your keys, follow these steps:

1. Select *Organization settings* in the upper navigation.
2. Select *API Keys* in the side navigation.

## API key

An API key identifies your project so Amplitude can route ingested data to it. Learn more about [API Key](/docs/apis/keys-and-tokens#api-key).

### Legacy API key

The first time you use API key management, you see the legacy API key in the *API Keys* tab. Amplitude created this key when you created the project. You can't disable it but you can click **Rotate** to replace the key.

### Generate an API key

To generate an API key, follow these steps:

1. Select the project you’re interested in.
2. Click **Generate API Key**.
3. Name the API key.

You can copy this API key to store or use elsewhere.

### Revoke an API key

To revoke an API key, follow these steps:

1. Select the API key.
2. Confirm that you want to revoke the key.

After you click **Revoke**, the key is permanently unusable. You still retain the API key for your records.

## Secret key (Beta)

Secret keys authenticate you to server-side Analytics APIs that read or modify project data. For more information, review [Keys and Tokens](/docs/apis/keys-and-tokens#secret-key).

### Generate a secret key

To generate a secret key, follow these steps:

1. Select the appropriate project.
2. Click **Generate Secret Key**.
3. Name the secret key and copy it into your records. Amplitude doesn't store secret keys, and there's no way to retrieve a secret key. The Key ID is a unique identifier for your secret key, but it's not the key itself.

### Delete a secret key

To delete a secret key, select the secret key you want to delete, then type “DELETE” to confirm your intent.

You can't use, see, or recover a secret key after deleting it.

## Limitations

- You can have a maximum of 50 active keys.
- While key creation is instantaneous, a revoked key can take up to 6 hours to stop working in rare cases. This applies to both legacy and non-legacy API keys.

Was this helpful?

<!--$-->

<!--/$-->