<!--
{
  "documentType" : "article",
  "framework" : "AppStoreConnectAPI",
  "identifier" : "/documentation/AppStoreConnectAPI/revoking-api-keys",
  "metadataVersion" : "0.1.0",
  "role" : "article",
  "title" : "Revoking API Keys"
}
-->

# Revoking API Keys

Revoke unused, lost, or compromised private keys.

## Discussion

Revoke an API key immediately if it becomes inactive, lost, or compromised. A revoked API key denies access to the App Store Connect API on your organization’s behalf.

> Important:
> Once you revoke an API key, you can’t reinstate it. Revoked keys are displayed for 30 days on the API Keys page under the Revoked heading.

### Revoking Team Keys

To revoke a team API key, log in to [App Store Connect](https://appstoreconnect.apple.com/) with an Admin account.

1. Select Users and Access, then select the Keys tab.
2. Click Edit next to the list of Active keys.
3. Select the API keys to revoke, and click Revoke Key.
4. Click the Revoke button to confirm.

### Revoking Individual Keys

There are two ways to revoke an individual API key, depending on your role. Begin both methods by logging in to [App Store Connect](https://appstoreconnect.apple.com/).

To revoke keys for another user, as an Admin:

1. Select Users and Access, then select the Keys tab.
2. Click Individual Keys.
3. Click Edit next to the list of Active keys.
4. Select the API keys to revoke, and click Revoke Key.
5. Click the Revoke button to confirm.

To revoke your own key:

1. Go to your user profile.
2. Scroll down to Individual API Key.
3. Click Revoke.
4. Click the Revoke button to confirm.

> Tip:
> Admins can prevent a user from creating an Individual Key by removing the Generate Individual API Keys permission.

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)