# How do I rotate or revoke a credential?

It depends which kind you have, and only the account owner can do either one.

The account API token has no revoke, only Regenerate, on its row in Settings -> API. The old value stops working immediately and every integration still using it breaks until you paste in the new one, so line up those updates before you click.

A scoped credential has a Revoke button on its row. It takes effect immediately, and the row stays in the table marked "Revoked" so you keep the record of what existed.

If you simply lost the value, there is no reveal to fall back on. Revoke it and mint a replacement.

Before you conclude a credential has died, check what the integration is actually sending. A scoped credential begins cmk_ and is 68 characters long; example text copied out of a snippet, or a slot still wrapped in angle brackets, is not a credential at all and fails the same way a revoked one does.

Read online: https://docs.closemagnet.com/articles/questions/rotate-or-revoke-a-credential