---
id: cloud-accounts.how-do-i-replace-a-leaked-s3-secret-key
url: https://storagestudio.us/faq/cloud-accounts/how-do-i-replace-a-leaked-s3-secret-key
category: "Cloud accounts"
subcategory: "Amazon S3"
question: "My S3 secret key may have leaked. What should I do?"
alt_questions:
  - "Rotate AWS access key Storage Studio"
  - "Secret Access Key in a screenshot"
  - "Change S3 keys in Storage Studio"
  - "Compromised AWS key what now"
  - "Update S3 secret without re-adding account"
short_answer: "Treat it as compromised: create a new access key in AWS, paste the new key and secret into the account with Edit, test the connection, then delete the old key in AWS. Your transfers and nickname are kept."
tags: ["amazon s3", "security", "access keys"]
related: ["https://storagestudio.us/faq/cloud-accounts/how-do-i-edit-a-cloud-account", "https://storagestudio.us/faq/cloud-accounts/what-aws-permissions-does-storage-studio-need"]
applies_to: "all"
last_reviewed: 2026-10-01
---

# My S3 secret key may have leaked. What should I do?

Treat it as compromised and replace it now. A secret that appeared in a screenshot, chat or shared terminal output should never be reused.

1. In the AWS console, create a new access key for the user.
2. In Storage Studio, select the account, click **Edit**, and paste the new **Access Key ID** and **Secret Access Key**. Save.
3. Click **Test connection** to confirm it works.
4. Back in AWS, deactivate and delete the old key.

Editing keeps the account, its nickname and its transfers, so nothing else needs redoing.