improved
Security
API
Security Update - Auto-deletion of API keys after 90 days of inactivity
The Marketplace team is rolling out an important security update - Auto-deletion of API keys after 90 days of inactivity
Why is this feature important?
API v1 keys can be exploited to gain unauthorised access to the platform and perform fraudulent activities such as SMS Pumping. This results in monetary loss to customers, hence a critical security priority for HighLevel.
What is the new security update?
- Agency or sub-account API keys that have not been used in the past 90 days will be automatically deleted.
- Deletion cadence: This activity will be once a quarter (automated). The first inactive API Keys auto-deletion is scheduled for 29 October 2024.
Communication cadence:
- The impacted Agency and Sub-accounts admins will receive three in-app notifications giving them a heads-up - 15 days, 7 days, and 1 day before the deletion
- Agency admins (including those whose locations are impacted) will receive an email 15 days prior with a complete summary of the upcoming deletion
- One day before the deletion, for 24 hours, the impacted agencies and sub-accounts will see a banner informing them about the upcoming deletion.
Preview of system notifications for impacted agencies and sub-accounts
