Support · Security & data

Rotating or revoking your key

You own the key; both operations are one click and neither creates a blind window.

Rotation flow

Create the new restricted key in Stripe → paste it in settings → FeeGuard validates the new key against Stripe before overwriting the old ciphertext → done. No gap in monitoring, no re-registration of webhooks.

Revocation timeline

Automated actions halt immediately. Detection stops at the next event. Historical findings remain fully viewable and exportable — revoking access does not erase your record.

When to rotate

After staff changes with key access, after any suspected exposure, on a routine schedule if your policy demands one. Rotation is cheap precisely so it gets done.