Contents

Revoking API Keys

Revoke unused, lost, or compromised private keys.

Overview

Revoke an API key immediately if it becomes inactive, lost, or compromised. A revoked API key denies access to the App Store Connect API on your organization’s behalf.

Revoking Team Keys

To revoke a team API key, log in to App Store Connect with an Admin account.

  1. Select Users and Access, then select the Keys tab.

  2. Click Edit next to the list of Active keys.

  3. Select the API keys to revoke, and click Revoke Key.

  4. Click the Revoke button to confirm.

Revoking Individual Keys

There are two ways to revoke an individual API key, depending on your role. Begin both methods by logging in to App Store Connect.

To revoke keys for another user, as an Admin:

  1. Select Users and Access, then select the Keys tab.

  2. Click Individual Keys.

  3. Click Edit next to the list of Active keys.

  4. Select the API keys to revoke, and click Revoke Key.

  5. Click the Revoke button to confirm.

To revoke your own key:

  1. Go to your user profile.

  2. Scroll down to Individual API Key.

  3. Click Revoke.

  4. Click the Revoke button to confirm.

See Also

Essentials