Hi @Ella . I am using Apify Environment variable to store API key. Recently, I received an email about security vulnerability in Apify Console. I hope that my key is not exposed because sometimes, I see that my API data is used but it is not updating on Apify console. I do not know, it shows instantly on Apify console or it takes few hours. Can you tell me? Thanks.

Hey Wasim, we have no way of knowing if anyone's env var was accessed, but to be on the safe side we recommend that you rotate any keys that you were storing in env vars but not set to secret.

Okay, I will rotate my key. I think that somebody is using my key. There is no option to set key as a secret. https://cdn.discordapp.com/attachments/1493165461473460255/1493238168751964310/Screenshot_2026-04-13_at_6.13.13_PM.png?ex=69de3dea&is=69dcec6a&hm=65280cbdad4390ce1ea75f53d9c8376c167a0728da42abec77ab6026cc2a76f0&

Click on

Edit

and toggle the Secret option in the modal

okay

If you need more info @Wasim Safdar, https://docs.apify.com/platform/actors/development/programming-interface/environment-variables#set-up-environment-variables-in-apify-console

Thanks, I am updating.

You probably need to build it again once you have changed it

👍