Skip to main content
HTTP status: 401 · Title: “API key expired”

​
When it fires

The key has an expiry date and the current time is past it.

​
Why it happens

  • The key was issued with an expiry (recommended for CI keys, contractor access and demos).
  • An expiry was set on a long-lived key during a security review.
  • Nothing about the key changed; the clock simply passed its expiry.

​
How to fix

  • Issue a new key from the Kash web app (Settings → API Keys), or contact ZeroID support if your keys are managed for you.
  • For automated rotation, issue and roll out the replacement key well before (for example 24 hours before) the old one expires.
  • The new key has a different id and prefix, so update every consumer.
See Authentication for key management.