Skip to content

Start here

Rotate credentials and reconnect

Restore access while preserving the connection used by existing workflows.

Update an existing connection when its credential changes. Keeping the connection identity allows workflows that reference it to continue using the same configured connection after access is restored. Creating a new connection is a separate action and does not automatically redirect those references.

Replace an API key or service-account credential

Open the connection's Edit dialog and update the appropriate credential fields. Use the secure fields for secrets. Confirm that the replacement credential belongs to the intended account and has the permissions required by the workflows and data you use.

Save the change and run a connection test. Then inspect a representative dependent workflow before resuming a schedule. If you also revoke the old key at the provider, coordinate that change so a still-running task is not unexpectedly interrupted. Strive cannot keep an externally revoked key working.

Reconnect OAuth

An expired OAuth connection offers Reconnect. Continue through the provider's authorization flow, verify the account, and grant the requested access. Reconnecting is useful when consent was withdrawn, a refresh credential is no longer usable, or the account needs renewed authorization.

An OAuth access token can also refresh normally without your intervention. If the connection needs a human reconnection, repeatedly running the workflow will not supply consent. Complete the provider step first, then test access.

Keep configuration changes separate

Renaming a connection does not rotate its credentials. Editing credentials does not change workflow schedules. Synchronization and scheduling are configured in the workflows that reference the connection.

If a changed credential exposes a different account or resource set, treat that as a data-source change: verify queries, folders, record identities, and write destinations. A successful test alone cannot confirm that the new account is the one your team intended.