Rotate or disconnect keys

Treat broker keys like any credential: replace (“rotate”) them on a schedule, and immediately if you think they may have leaked.

Rotating

Generate a fresh pair at Alpaca, then save it over the old one in Settings → Broker. The save tests the new pair first, so a failed rotation leaves your old working keys in place — there’s no gap where the account is half-connected. Once the new pair verifies, revoke the old one at Alpaca.

Disconnecting

The Disconnect button on each broker card clears the stored keys for that environment. Without keys SleeveFolio can’t read your account or submit orders there — the dashboard shows its not-configured state until you reconnect. Orders already open at the broker carry on on their own — manage them from the Alpaca dashboard while disconnected.