# Leaked OpenAI API Key? How to Revoke It Fast > Pushed an OpenAI API key to GitHub? Revoke it, check usage for abuse, set limits and clean up. Step-by-step, with the official revoke link. Source: https://leakwatch.net/secrets/openai-api-key --- [LeakWatch](/) [Product](/product)[Live feed](/leaks)[Guides](/secrets)[Blog](/blog)[Free scan](/) 1. [Home](/) 2. [Secrets](/secrets) 3. OpenAI API key AI · Secret guide # Leaked OpenAI API key: what to do in the first hour High severityChecked liveLast verified October 2, 2026 · 4 min read An OpenAI API key lets whoever holds it send requests that are billed to *your* account and use *your* rate limits, with access to whatever your project allows. If yours ended up in a public place, the fix takes about a minute, and it has to come before anything else: revoke the key first, then look at what happened. Deleting the commit is not enough, because public commits are copied within minutes. [Check your GitHub account for leaked secrets — free](/) Provider OpenAI Severity High Impact SaaS account access and billing Checked live by LeakWatch Yes Revoke at [OpenAI](https://platform.openai.com/api-keys) ## What an OpenAI API key looks like OpenAI secret keys start with `sk-`. Keys created inside a project start with `sk-proj-`, older user keys with plain `sk-`: ```text sk-proj-…XXXX (project key, masked) sk-…XXXX (older user key, masked) ``` Two look-alikes are *not* OpenAI keys: `sk-or-…` belongs to OpenRouter and `sk-ant-…` to Anthropic. If your key starts with one of those, use the [OpenRouter](/secrets/openrouter-api-key) or [Anthropic](/secrets/anthropic-api-key) guide instead. ## How OpenAI keys get leaked - **A `.env` file committed by accident**, or an `.env.example` that someone filled with the real value to “make it work”. - **Calling the API from the browser.** Anything shipped in a front-end bundle is public. A key in client-side JavaScript is leaked the moment the page loads. - **Notebooks.** A key pasted into a Jupyter or Colab cell is saved with the notebook, and cell outputs can echo it again. - **Copy-pasted snippets.** Code from a chat, a tutorial or an AI assistant often contains a placeholder that gets replaced with the real key “just to test” and never put back. - **Logs and screenshots**: a debug print of request headers, a CI log, a screenshot of a terminal shared in a bug report. ## What to do in the first hour 1. **Revoke the key.** Open the [OpenAI API keys page](https://platform.openai.com/api-keys), find the key (the list shows the name and the last characters, so match them against what leaked) and delete it. Do this before cleaning anything. If the key belongs to a project, make sure you are in the right project. 2. **Create a replacement** and store it in an environment variable or a secret manager, not in the repository. Give each service its own key so the next revoke does not take everything down, and restrict its permissions to what that service actually calls. 3. **Check usage for abuse.** Open the usage dashboard and look at the period since the key was exposed. Red flags: a spike in requests, models you never call, or activity at hours when nobody on your team works. Usage figures can lag, so check again in a few hours. 4. **Cap the damage next time.** Set a monthly budget or spend limit on the project and enable usage alerts, so a stolen key cannot silently run up a large bill. 5. **Check what else was in the same file.** A leaked `.env` rarely holds only one secret. Revoke the database password, cloud keys and webhooks that were next to it. 6. **Only then clean the repository**: remove the value from the code, add the file to `.gitignore`, and rewrite history if you want. The full order of operations is in our guide [I accidentally pushed an API key to GitHub](/blog/i-accidentally-pushed-an-api-key-to-github). [Not sure what else leaked? Run a free scan.](/) ## Revoke it at OpenAI Go to the [OpenAI API keys page](https://platform.openai.com/api-keys), select the key and delete it. A deleted key stops working for new requests. Keys are scoped to a project, so a key you cannot find may live in another project of the same organization. ## How LeakWatch detects it LeakWatch recognizes the `sk-` / `sk-proj-` format and excludes the look-alike prefixes of OpenRouter and Anthropic, so those keys are reported under their own type. See which vendors leak most this week on the [leak trends](/leaks/trends) page. LeakWatch can check whether a detected key is still active with a read-only request to OpenAI. It never reads your data or spends your credits. The request lists the available models. It does not generate text. ## FAQ How do I know if someone used my OpenAI key? Look at the usage dashboard for the period since the exposure and compare it with your normal traffic. Unexpected models, a sudden jump in volume or off-hours activity are the signs. If you see unfamiliar activity, revoking the key already stops it for new requests; contact OpenAI support if you need billing reviewed. Can I just regenerate the key and keep the old one for a while? No. The point of rotating is that the old value stops working. Create the new key, deploy it, and delete the old one right away. Keeping the exposed key “just in case” leaves the hole open. Is an sk- key in a private repository still a problem? It is a smaller risk, not zero: anyone with repository access, every clone and every CI log can read it. Treat it as exposed if the repository was ever public, was forked, or is shared with people who should not have the key. ## Related - [Anthropic (Claude) API Key](/secrets/anthropic-api-key) - [OpenRouter API Key](/secrets/openrouter-api-key) - [Groq API Key](/secrets/groq-api-key) - [I accidentally pushed an API key to GitHub](/blog/i-accidentally-pushed-an-api-key-to-github) - [Which vendors leak most this week](/leaks/trends) - [All secret guides](/secrets) [Get alerted next time a secret leaks — create a free account](/) LeakWatch is not affiliated with OpenAI. ![Gabriel Diyan, founder of LeakWatch](/brand/Photo-Gabriel-Diyan.webp) Gabriel Diyan (0xCr0c0) Cybersecurity student, founder of LeakWatch. I built and run the scanner described here — the detection patterns, the false-positive classifier and the provider validators are mine. [More about who I am](/about). [GitHub](https://github.com/Leakwatch-Scan) · [X](https://x.com/LeakwatchScan) · [LinkedIn](https://www.linkedin.com/in/gabriel-diyan-80a378375) · [GitHub (personal)](https://github.com/crocogab) LeakWatch Secrets leak into public commits every minute. This watches the forges for yours. Built and run by [Gabriel Diyan](/about), a cybersecurity student — [why LeakWatch exists](/about). Scan - [Product](/product) - [Live feed](/leaks) - [Trends](/leaks/trends) - [API docs](/docs) - [CI/CD](/docs?tab=ci) Read - [Blog](/blog) - [Secret guides](/secrets) - [Changelog](/changelog) - [About](/about) Verify - [Security](/security) - [Privacy](/privacy) - [Terms](/terms) - [Legal](/legal) - [Contact](/contact) - [Status](https://status.leakwatch.net) © 2026 LeakWatch [GitHub](https://github.com/Leakwatch-Scan)[X](https://x.com/LeakwatchScan)