Learn about TruffleHog Contribute on GitHub

Docs Menu

Introduction

Getting Started

About Truffle Security

Key Rotation 101

What is a leaked secret/key?
- How often does this happen?
- What are the security implications of a leaked secret?
What is Key Rotation?
- Can I just delete the code exposing the key?
- What about editing Git history?

Tutorials

Airbrake

Regenerate the Airbrake Project API Key
- Step 1 - Navigate to the project Settings page
- Step 2 - Regenerate the project API key
Replace the Leaked Airbrake Key

Atlassian

Generate a new Atlassian API Token
- Step 1 - Navigate to the API Token page
- Step 2 - Generate a new API Token
Replace the Leaked Atlassian Token
Revoke the Leaked Atlassian Token
- Step 1 - Navigate to the API Token page
- Step 2 - Revoke the Token
Resources

AWS

Generate a new AWS access key
- Step 1 - Navigate to the Access keys page
- Step 2 - Generate a new Access key
Replace the Leaked AWS Key
Revoke the Leaked AWS key
Resources

Azure DevOps

Regenerate an Azure DevOps Personal Access Token
- Step 1 - Navigate to the Azure DevOps Tokens page
- Step 2 - Regenerate the Personal Access Tokens
Replace the Leaked Azure DevOps Personal Access Token
Resources

Azure Function

Regenerate an Azure Function Key
- Step 1 - Navigate to the Azure Function App page
- Step 2 - Regenerate the App keys or Function keys
Replace the Leaked Azure Function Key
Resources

Azure Search Admin

Regenerate an Azure Search Admin Key
- Step 1 - Navigate to the Azure Search Keys page
- Step 2 - Regenerate the Azure Search Admin Key
Replace the Leaked Azure Search Admin Key
Resources

Azure Search Query

Generate a new Azure Search Query Key
- Step 1 - Navigate to the Azure Search Keys page
- Step 2 - Generate a new key
Replace the Leaked Azure Search Query Key
Revoke the Leaked Azure Search Query Key
Resources

Azure Storage

Regenerate an Azure Storage Account Access Key
- Step 1 - Navigate to the Access keys page
- Step 2 - Regenerate the Access key
Replace the Leaked Azure Storage Account Access Key
Resources

ElevenLabs

Revoke old API key / Generate new API key
Resources

Eraser

Generate a new Eraser API key
Revoking a Eraser API key
Resources

Flexport

Generate a new Flexport API key
Revoking a Flexport API key
Resources

GCP

Generate a new GCP API Key
- Step 1 - Navigate to the relevant Service Account page
- Step 2 - Generate a new GCP API key
Replace the Leaked GCP API Key
Revoke the Leaked GCP API Key
Resources

GitHub

Generate a new GitHub PAT
- Step 1 - Navigate to the Access Token page
- Step 2 - Generate a new PAT
Replace the Leaked GitHub PAT
Revoke the Leaked GitHub PAT
- Step 1 - Navigate to the Access Token page
- Step 2 - Revoke the Access Token
Best Practices
Resources

GitLab

Generate a new GitLab Personal Access Token
- Step 1 - Navigate to the Personal Access Token page
- Step 2 - Generate a new Personal Access Token
Replace the Leaked GitLab Personal Access Token
Revoke the Leaked GitLab Personal Access Token
- Step 1 - Navigate to the Personal Access Token page
- Step 2 - Revoke the Personal Access Token
Resources

Groq

Generate a new Groq API key
- Step 1 - Navigate to the API key page
- Step 2 - Generate a new API key
Revoking a Groq API key
- Step 1 - Navigate to the API key page
- Step 2 - Revoke the Groq API key
Resources

Mailchimp

Generate a New Mailchimp API key
Replace the Leaked Mailchimp Key
Revoke the Leaked Mailchimp API key
Notes & Best Practices
Resources

MaxMind

Generate a new MaxMind License Key
- Step 1 - Navigate to the MaxMind License Keys page
- Step 2 - Generate a New License key
Replace the Leaked MaxMind License Key
Deactivate the Leaked MaxMind License key
- Step 1 - Navigate to the MaxMind License Keys page
- Step 2 - Deactivate the License Key
Resources

Microsoft Teams

Generate a new Microsoft Teams Webhook
- Step 1 - Navigate to the Webhook page
- Step 2 - Generate new MS Teams Webhook
Replace the Leaked Microsoft Teams Webhook
Revoke the Leaked Microsoft Teams Webhook
- Step 1 - Navigate to the Webhook page
- Step 2 - Revoke the MS Teams Webhook
Best Practices
- A Webhook is a Password
Resources

MongoDB

Generate a new MongoDB API key
- Step 1 - Navigate to the API key page
- Step 2 - Generate a new API key
Replace the Leaked MongoDB API key
Revoke the Leaked MongoDB API key
- Step 1 - Navigate to the API key page
- Step 2 - Revoke the API key
Resources

Netlify

Generate a new Netlify Personal Access Token
- Step 1 - Navigate to the Personal Access Token page
- Step 2 - Generate a new Personal Access Token
Replace the Leaked Netlify Personal Access Token
Revoke the Leaked Netlify Personal Access Token
- Step 1 - Navigate to the Personal Access Token page
- Step 2 - Revoke the Personal Access Token
Resources

NPM

Generate a new NPM Access Token
- Step 1 - Navigate to the Access Token page
- Step 2 - Generate a new Access Token
Replace the Leaked NPM Access Token
Revoke the Leaked NPM Access Token
- Step 1 - Navigate to the Access Token page
- Step 2 - Revoke the Access Token
Resources

OpenAI

Generate a new OpenAI API key
- Step 1 - Navigate to the API key page
- Step 2 - Generate a new API key
Replace the original OpenAI API key
Revoke the original OpenAI API key
- Step 1 - Navigate to the API key page
- Step 2 - Revoke the OpenAI API key
Resources

Sendbird

Regenerate the Sendbird API Key
- Step 1 - Navigate to the API Key page
- Step 2 - Generate a new API Key
Replace the Leaked Sendbird API Key
Resources

Sendgrid

Generate a new Sendgrid API Key
- Step 1 - Navigate to the API Key page
- Step 2 - Generate a new API Key
Replace the Leaked Sendgrid API Key
Revoke the Leaked Sendgrid API Key
- Step 1 - Navigate to the API Key page
- Step 2 - Revoke the API Key
Resources

Slack

Generate a new Slack Configuration Token
- Step 1 - Navigate to the Configuration Token page
- Step 2 - Generate a new Configuration Token
Replace the Leaked Slack Configuration Token
Revoke the Leaked Slack Configuration Token
- Step 1 - Navigate to the Configuration Token page
- Step 2 - Revoke the Configuration Token
Resources

Slack Webhook

Generate a new Slack Webhook
- Step 1 - Navigate to the Webhook page
- Step 2 - Generate a new Slack App with Webhook
Replace the Leaked Slack Webhook
Revoke the Leaked Slack Webhook
- Step 1 - Navigate to the Webhook page
- Step 2 - Revoke the Webhook
Best Practices
- A Webhook is a Password
Resources

Sourcegraph

Generate a New Sourcegraph Access Token
Replace the Leaked Sourcegraph Access token
Revoke the Access Token
Resources

Square

Regenerate a new Square Access Token
- Step 1 - Navigate to the Application dashboard
- Step 2 - Regenerate a new Access Token
Replace the Leaked Square Access Token
Resources

Stripe

Generate a new Stripe API key
- Step 1 - Navigate to the API key page
- Step 2 - Generate a new API key
Replace the Leaked Stripe API key
Revoke the Leaked Stripe API key
- Step 1 - Navigate to the API key page
- Step 2 - Revoke the API key
Resources

Sumo Logic

Deactivate a Sumo Logic Access Key
Resources

Tailscale

Generate a new Tailscale Auth Key or API Access Token
- Step 1 - Navigate to the Keys page
- Step 2 - Generate a new Auth Key or API Access Token
Replace the Leaked Tailscale Auth Keys and API Access Tokens
Revoke the Leaked Tailscale Auth Keys and API Access Tokens
- Step 1 - Navigate to the Keys page
- Step 2 - Revoke the Auth Keys and API Access Tokens
Best Practices
Resources

Twilio

Promote a new Twilio API key
- Step 1 - Navigate to the API key page
- Step 2 - Promote a new API key
Replace the Leaked Twilio API key
Resources

VTEX

Generate a new VTEX Application Key
- Step 1 - Navigate to the Application Key page
- Step 2 - Generate a new Application Key
Replace the Leaked VTEX Application Key
Revoke the Leaked VTEX Application Key
- Step 1 - Navigate to the Application Key page
- Step 2 - Revoke the VTEX Application Key
Resources

Documentation