Guides

What to do when a secret leaks, and how to stop it happening.

• Leaked an API key? What to do in the first hour

  Revoke, replace, investigate, prevent. The order matters.

• Pasted an API key into ChatGPT? What to do next

  Rotate the key, delete the chat, and check whether customer data was involved.

• How to rotate an AWS access key without downtime

  Create, deploy, deactivate, delete. Plus what to check if the old key leaked.

• Committed a secret to Git? Rotate first, then clean up

  Why a new commit doesn’t fix it, and how to rewrite history properly.

• How to share logs with ChatGPT or Claude safely

  What to remove, what the AI still needs, and a two-minute routine.