topic Re: Rotating client in APIs & Integrations

Rotating client

ajithmurali — Fri, 12 Dec 2025 00:00:34 GMT

As Detailed in https://community.hubspot.com/t5/APIs-Integrations/Need-to-Rotate-Client-Secret-for-Public-App/m-p/1194117#M84015

I would llike to get support for rotating my client secret. Happy to provide details of APP ID in a DM to help reset this

Re: Rotating client

SealaB — Fri, 12 Dec 2025 00:16:04 GMT

Hey there, @ajithmurali -
Here are some resources on the topic, just for information:

- Working with OAuth
- Update a secret

I've also sent over a DM - so please keep an eye out for this. Thanks!

Seala, Community Manager

Re: Rotating client

ajithmurali — Fri, 12 Dec 2025 00:31:00 GMT

Appreciate the fast response and addtiional information in the DM.

Re: Rotating client

SealaB — Fri, 12 Dec 2025 00:36:52 GMT

@ajithmurali - My pleasure, hope this helps! Let us know how you manage from here. 🙂

Re: Rotating client

RubenBurdin — Mon, 15 Dec 2025 15:59:35 GMT

Hi @ajithmurali , glad to see this moving quickly with the Community team.

Just to add a bit of context for anyone else reading: for public apps, client secret rotation isn’t something you can fully self-serve at any time the way you can with private apps. In most cases, HubSpot expects rotation to be coordinated, especially if the app is already installed in multiple portals, to avoid breaking OAuth flows unexpectedly.

The correct path is exactly what’s happening here:

Reach out via the Community or Support.
Share the App ID privately.
HubSpot can assist with generating or resetting the client secret and advising on rollout timing so existing installations keep working.

The docs Seala linked are the right reference points for understanding the OAuth flow and how secrets are handled, but the actual reset often requires human intervention once the app is live. If you’re planning a rotation as part of a security policy, it’s also worth making sure your app supports running with the old and new secrets during a transition window. Sounds like you’re on the right track now.