THREATNOIR
Subscribe
Back to Feed
Cloud SecurityMay 21, 2026

Google API Keys Remain Active After Deletion

Google API keys remain active for 23 minutes after deletion, contrary to claims.

Read at source
Vendor Watch

Run Google?

Get an email when a reviewed story names Google, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works

Summary

A security researcher found that Google API keys remain active for 23 minutes after deletion, despite Google's claim of immediate deletion. This delay could allow malicious actors to continue using the keys even after they are supposedly revoked, potentially leading to unauthorized access and data breaches.

Entities

Google (vendor)API (technology)