Oct 20, 2018
AI Stats Team
Security
Incident Response
Key Rotation
Security Notice: Rotate Your Keys (April 19, 2026)
Following Vercel's April 19, 2026 security incident bulletin, we recommend all users rotate keys immediately. We have also updated key creation as a precaution.
We are issuing this notice in response to Vercel's security bulletin published on April 19, 2026:
What this means for AI Stats users
Out of caution, we are recommending that all users rotate their keys as soon as possible.
Even if you have not seen any suspicious activity, this is a precautionary security step we recommend taking now.
What we changed
As a precaution, we have updated our key creation flow to strengthen key safety during this period.
What you should do now
- Create a new key in /settings/keys.
- Update your apps, services, and CI/CD secrets to use the new key.
- Verify traffic is working on the new key.
- Revoke old keys immediately after cutover.
- Review usage/activity logs for unexpected requests.
Priority
Rotate production keys first, then staging and development keys.
Recommended rotation checklist
- API keys used in backend services
- Keys used in CI/CD pipelines
- Keys stored in environment variables
- Shared team keys or long-lived service keys