Important
Stay updated on React2Shell

How to reset the secrets of your Supabase integration

Rotate Supabase API keys, JWT secrets, and database passwords.

TMO
2 min read
Last updated December 7, 2025

Secret rotation is a security best practice that limits the exposure window if a credential is compromised. You might rotate secrets when:

  • A team member with access to credentials leaves
  • You suspect a credential has been exposed
  • Your security policy requires periodic rotation

These steps will guide you on updating the password for your Supabase database.

- You have a Supabase database through a Native integration from Vercel Marketplace.

- You have access to manage your account's resources, including your Supabase integration.

1. From your Vercel dashboard, go to the Integrations tab.

2. Next to the integration, select the Manage button. Native integrations appear with a billable badge.

3. On the Integrations page, select the Open in Supabase button.

1. Go to Project Settings

CleanShot 2025-12-06 at 21.50.58@2x.png

2. Go to JWT Keys

CleanShot 2025-12-06 at 21.54.50@2x.png

3. Locate the Legacy JWT Secret section

4. Click Change legacy JWT secret

CleanShot 2025-12-06 at 22.53.03@2x.png

5. Click Generate a random secret, then type: I understand and wish to proceed in the confirmation field and click the Generate random secret button.

Changing the JWT secret will invalidate all existing user sessions. Users will need to log in again.

1. Go to Database settings

CleanShot 2025-12-06 at 21.58.10@2x.png

3. Click Reset database password

CleanShot 2025-12-06 at 21.58.38@2x.png

4. Click Generate a password & Reset password

CleanShot 2025-12-06 at 21.58.57@2x.png

All database connections will be terminated when you reset the password. Your application will lose database connectivity until you redeploy with the new password.

1. Go to Project Settings

CleanShot 2025-12-06 at 21.50.58@2x.png

2. Go to API Keys

CleanShot 2025-12-06 at 21.51.30@2x.png

3. Click New secret key

CleanShot 2025-12-06 at 21.52.03@2x.png

4. Enter a name and click Create API key

CleanShot 2025-12-06 at 21.52.48@2x.png

5. Click the three dots next to the old key

CleanShot 2025-12-06 at 21.54.09@2x.png

6. Click Delete the API key, enter the name and confirm

1. From your Vercel dashboard, select your project

2. Go to the Deployments tab

3. Find your latest production deployment

4. Click the three dots and select Redeploy

Was this helpful?

supported.

Read related documentation

No related documentation available.

Explore more guides

No related guides available.

How to reset the secrets of your Supabase integration | Knowledge Base