Keys and secrets
You pasted a key into the chat: what now
- What you see
- An API key, token or password ended up in a chat message.
- Why it happens
- Chat messages may be stored. Treat the key as leaked, even if nothing bad happened.
- How to fix it
- Revoke the key now on the provider's website.
- Create a new one and paste it only into Vercel and
.env.local. - Ask your agent to check the key isn't in any file or commit.
Message for your agent
I accidentally pasted a key in the chat and I've revoked it. Check that no file or commit contains it, and tell me where the new one should go. Don't show any value.
Safety
How to prevent it: Your agent never asks for keys. If anything does, it's a red flag.
Was this page helpful?