Back to article

Aikido Security's Blog

Google API will keys keep working after you delete them (opens in new tab)

Covers 2 stories including Eventual ConsistencyCovered by 14 sources including tech.slashdot.org, theregisterDiscussed on Hacker News and Lobsters

Covers 2 related stories

en.wikipedia.org·

Eventual Consistency

Discussed on Hacker News

Blog ◆ Truffle Security Co.·

Google API Keys Weren't Secrets. But then Gemini Changed the Rules. ◆ Truffle Security Co.

Discussed on Hacker News, Lobsters, and r/programming

Covered in 14 articles

tech.slashdot.org·

Google API Keys Remain Active After Deletion

Threat hunters find Google API keys still usable 23 minutes after deletion

Discussed on Hacker News

Deleted Google API Keys Remain Active up to 23 Minutes, Study Finds

600K Lithuanian Records Leaked 🇱🇹, KnowledgeDeliver 0-Day RCE 💥, Google Family Link Hijack 📱

Help Net Security·

Deleted Google API keys keep working for up to 23 minutes, researchers warn

thehackernews.com·

OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack

·

'You have no way to revoke it faster or confirm when it stops working': Experts find Google API keys are still usable, even after you delete them

Links 23/05/2026: Social Media Bans and Demise of Userbase of LLM Chatbots

Deleted Google API keys keep working for 23 minutes, research shows

CTO at NCSC Summary: week ending May 24th

Discussed on Substack

In other languages

Googlevi API ključevi ostaju aktivni i do pola sata nakon brisanja

CERT-SE:s veckobrev v.22

Les news de Korben·

Les clés API Google encore en vie même après leur suppression