Credential Rotation
Noun · Security & Infosec
Definitions
The practice of periodically replacing secrets (API keys, database passwords, certificates) with new ones and invalidating the old. Limits the blast radius of leaked credentials and is required by many compliance frameworks (SOC 2, PCI DSS).
In plain English: Regularly changing your passwords and API keys so that if one gets leaked, it won't work for long.
Example: "We rotate database credentials every 90 days using Vault — the app fetches the current password at startup, no restarts needed."
Related Terms
- Secret Rotation
- Audit Log
- HIPAA
- SBOM
- SOC 2
- Audit Trail
- Chain of Custody
- Counter-Intelligence
- Cyber Range
- Cyber Threat Intelligence
- Cyberwarfare
- Dark Web
- Deception Technology
- Hardening
- Insider Threat
- Key Rotation
- Log Management
- Mobile Device Management
- PCI DSS
- WORM Storage
- CMMC
- Data Sovereignty
- GLBA
- ISO 27001
- ISO 27002
- PCIDSS
- Protected Health Information