Keys
Kill switch and slow loosening
Stop a key everywhere at once, and why looser changes wait an hour.
Killing a key takes effect everywhere at once. Making rules stricter also applies immediately.
Making rules looser, or reviving a killed key, waits one hour and sends you an alert. If someone gets into your dashboard, they cannot quietly open a key up: you hear about it with time to react, and saving stricter rules cancels the pending change.
The account owner can revive a killed key at once from the dashboard, after confirming with a passkey in the last five minutes. An email or authenticator code is not enough, a passkey added in the last hour cannot be used for it, API tokens always wait the hour, and the whole team gets an alert. A key that was killed because it was found in public never comes back at once: create a new ghost key instead.
Still have a question?
We read every email, usually within a day.