> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Secret rotation

> Learn what secrets rotation is, why it matters, and how Infisical enables it.

## What is secret rotation?

Secret rotation is the process of regularly replacing credentials like API keys, database passwords, and tokens to reduce the risk of long-term exposure. Even if a secret is compromised, frequent rotation limits how long it can be used.

Without rotation, secrets often go unchanged for months or years: hardcoded in codebases, embedded in CI pipelines, or shared across environments. Over time, this increases the risk of leaks, misuse, and operational blind spots.

## Secret rotation in Infisical

Infisical automates rotation using a rolling lifecycle model where new credentials are issued on a fixed schedule with previous ones remaining temporarily valid to give systems time to update without disruption. Each secret moves through three phases: active, inactive, and eventually revoked. This ensures that applications continue to function smoothly throughout the rotation process.

When rotation is applicable for a given secret type, using it is strongly recommended. Infisical supports configuring automatic rotation for a growing set of use cases including [PostgreSQL](https://infisical.com/docs/documentation/platform/secret-rotation/postgres-credentials.md), [MySQL](https://infisical.com/docs/documentation/platform/secret-rotation/mysql-credentials.md), [Microsoft SQL Server](https://infisical.com/docs/documentation/platform/secret-rotation/mssql-credentials.md), [OracleDB](https://infisical.com/docs/documentation/platform/secret-rotation/oracledb-credentials.md), [LDAP](https://infisical.com/docs/documentation/platform/secret-rotation/ldap-password.md), [AWS IAM users](https://infisical.com/docs/documentation/platform/secret-rotation/aws-iam-user-secret.md), [Azure](https://infisical.com/docs/documentation/platform/secret-rotation/azure-client-secret.md) and [Okta](https://infisical.com/docs/documentation/platform/secret-rotation/okta-client-secret.md) client secrets, and more.

## Next steps

> [card] [Set Up Secret Rotation](https://infisical.com/docs/documentation/platform/secret-rotation/overview)
>
> Configure automatic rotation for your credentials.

> [card] [Browse Supported Rotations](https://infisical.com/docs/documentation/platform/secret-rotation/overview#supported-providers)
>
> Explore all systems Infisical can rotate credentials for.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.