Rotate or disconnect keys

Treat broker keys like any credential: replace (“rotate”) them on a schedule, and immediately if you think they may have leaked.

Rotating

Generate a fresh pair at Alpaca, then save it over the old one in Settings → Broker. The save tests the new pair first, so a failed rotation leaves your old working keys in place. There’s no gap where the account is half-connected. Once the new pair verifies, revoke the old one at Alpaca. If you have two-factor authentication turned on, you may be asked to confirm your authenticator code before the new keys save. Saving credentials is a protected action.

If you revoke first

Revoke or regenerate the pair at Alpaca before saving its replacement, and the keys SleeveFolio holds stop working. The next time SleeveFolio talks to that account (its regular check, a daily automatic run, or an order) Alpaca refuses them: new orders and automatic trading on that account pause, you get one alert, and a banner with a Reconnect button shows on every screen. Saving the new pair lifts all of it at once (see Keys that stopped working).

Disconnecting

The Disconnect button on each broker card clears the stored keys for that environment (and the reconnect banner, if Alpaca had refused them). Without keys SleeveFolio can’t read your account or submit orders there; the dashboard shows its not-configured state until you reconnect. Orders already open at the broker keep running on their own. Manage them from the Alpaca dashboard while disconnected.