Secret Rotation
Noun · Security & Infosec
Definitions
The practice of periodically changing secrets (API keys, passwords, certificates) to limit the damage window if a secret is compromised. The thing everyone knows they should do and almost nobody does often enough.
In plain English: Regularly changing passwords, API keys, and other secrets on a schedule, so that if one gets leaked, the window of time an attacker can use it is limited.