Take a look at the new APP_KEY rotation features of Laravel 11

[@moumitabhattacharjee5925]

When I need for rotation of APP_KEY?

[@trap7369]

its important, but if i need to rotate the keys more than one time? would have two or three APP_PREVIOUS_KEYS?

[@komersio]

Is this works on rotate DB users too ?

[@metaphoricallyspeaking]

Very nice! 👌

[@aldoyh]

Just Whooow ❤❤

[@rickokodr--]

For what reason are we changing the api_key ?

for one, if you have a reason to believe they are compromised.

[@julienSibille]

In which scenarios you would need to rotate your APP_KEY ?

[@diegoaraujo9193]

You should adopt a period to change your keys and not stay forever with the same keys, I guess. I'm talking about apps which is up and running for long time, like 3 years or more. So would be very healthy to renew keys If you worry about security.

[@julienSibille]

@@diegoaraujo9193 Ok thanks ! But in that case, i don't get the point of using old unsafe keys to continue login users

[@Quadman4853]

@@julienSibille Probably it's aiming towards migrating all encrypted data and removing an old api key when everything is using the new one

[@developer_sagor]

great ❤❤❤

[@mahdibagheri71]

😍🤩😍

[@packofblackdogs]

Very strange feature. Suddenly, your old key is "compromised" and you rotate the key on DB with 1M+ records.. and have no idea which record was encrypted with which key.. and old key is still available.