---
title: "Rotate an OAuth client secret"
slug: "rotate-an-oauth-client-secret"
status: "new"
updated: 2026-09-14T13:50:39Z
published: 2026-09-14T13:50:39Z
canonical: "help.gong.io/rotate-an-oauth-client-secret"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.gong.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Rotate an OAuth client secret

> **Who can use this**: Tech admin
> 
> **Available on**: Any Gong plan

Rotating a client secret replaces the current secret with a new one. During the grace period you choose, both the old and new secrets are valid, so your integration can migrate to the new secret without downtime. When the grace period ends, the old secret is permanently revoked. Rotation does not end active user sessions or revoke existing access tokens.

## Before you begin

Secret rotation applies to integrations with the Manual registration type only. [Learn more about creating an OAuth app for Gong.](/v1/docs/create-an-app-for-gong)

> [!NOTE]
> **Note:**
> 
> Only two secrets can be active at once. If you rotate again before the grace period ends, the previous old secret is revoked immediately and a new grace period begins for the newly replaced secret.

**To rotate an OAuth client secret:**

1. From the left sidebar, click **Admin center**.
2. In the **Settings** tab, click **API** under **Ecosystem**.
3. Click the **Integrations** tab.
4. Find the integration you want to update and click the **More actions** icon, then click **Edit**.
5. In the **Credentials** section, click **Rotate secret**.
6. In the **Old secret grace period** field, enter the number of hours the old secret remains valid. Enter 0 to revoke it immediately. The maximum is 168 hours; the default is 24.
7. Click **I confirm rotation**.
8. Copy the new client secret.

> [!NOTE]
> **Important:**
> 
> The new secret is displayed once. Copy it now. You can copy it again during the same session, but it will not be shown after you close or reload the page.

The **Credentials** section now shows two secrets: **Client secret (old)** and **Client secret (new)**. The old secret remains valid until the grace period ends or until you rotate again, whichever comes first.

## Frequently asked questions

**Does rotating the secret affect active user sessions or access tokens?**

No. Rotation does not end active sessions or revoke access tokens. It replaces the secret used to request new tokens. Users and integrations already authenticated continue to work until their tokens expire naturally.

**What happens if I rotate again before the grace period ends?**

The old secret from the previous rotation is revoked immediately, and a new grace period begins for the secret just replaced. Only two secrets can be active at once.

**Can I see the new secret again after closing the page?**

No. The new secret is shown once in full during the session. Copy it before closing or reloading the page. You can copy it multiple times within the same session.

A team member who manages and configures the Gong platform and handles CRM integrations, user provisioning, permissions, and system settings. [Find my Tech admin](/v1/docs/find-your-technical-or-business-admin).

Access to this feature depends on your [assigned seat](/v1/docs/plans-and-seats).