# You pasted a key into the chat: what now

**What you see:** An API key, token or password ended up in a chat message.

**Why it happens:** Chat messages may be stored. Treat the key as leaked, even if nothing bad happened.

## How to fix it

1. Revoke the key now on the provider's website.
2. Create a new one and paste it only into Vercel and `.env.local`.
3. Ask your agent to check the key isn't in any file or commit.

## Message for your agent

```text
I accidentally pasted a key in the chat and I've revoked it. Check that no file or commit contains it, and tell me where the new one should go. Don't show any value.
```

**How to prevent it:** Your agent never asks for keys. If anything does, it's a red flag.

---
Source: [Agentic Makers](https://agenticmakers.app/en/help/pasted-a-key-in-the-chat) · License: CC BY 4.0