Managing Your API Keys: Disabling and Re-enabling
Klaviyo allows you to disable and re-enable API keys without permanently deleting them. This is useful if you want to temporarily pause a key’s activity - for example, while investigating suspicious behavior - while preserving the option to restore it later.
This article covers:
- How to disable an API key
- How to re-enable an API key
- What to do if Klaviyo has disabled a key on your behalf
Before you begin
You must have API Key Write permission on your account to disable or re-enable API keys. If you do not see the options described below, contact your account owner or admin to adjust your permissions.
How to disable an API key
- Log into your Klaviyo account.
- Navigate to Settings > API Keys.
- Locate the key you want to disable. You can use the key name or the partial key value to identify it.
- Click the … (more options) menu next to the key.
- Select Disable.
- Confirm the action in the dialog that appears.
The key will immediately stop accepting API calls. It will appear as Disabled in your key list and will be grayed out. No data is deleted, and the key can be re-enabled at any time.
Note: Disabling a key will pause any integrations or workflows that rely on it. Before disabling, make sure you know which systems are using the key, or check the key’s activity under Settings > API Keys > [Key Name] > Activity.
How to re-enable an API key
- Log into your Klaviyo account.
- Navigate to Settings > API Keys.
- Locate the disabled key. Disabled keys are grayed out and labeled Disabled.
- Click the … (more options) menu next to the key.
- Select Re-enable.
- Confirm the action in the dialog that appears.
The key will immediately resume accepting API calls.
What do I do if Klaviyo disabled my API key?
Klaviyo automatically disables API keys that have not been used within an extended period of time days. This is a security measure to reduce the risk of dormant keys being exploited. Klaviyo may also disable a key on your behalf if we believe it to be exposed and at-risk of abuse.
If your key was disabled for one of these reasons, you will see it labeled Disabled in your key list. You should also have received an email notification from Klaviyo's Security and Trust team ahead of the disablement.
What to do:
- If you still need the key, you can re-enable it yourself by following the steps in the How to re-enable an API key section above. Re-enabling the key resets the inactivity timer.
- If you no longer need the key, you can leave it disabled or delete it permanently from the … menu.
Note: If you re-enable the key and it goes unused again for an extended period, it will be disabled again automatically.
Related articles
Learn more about managing and securing your Klaviyo API keys:
- How to create or clone a private API key
Learn how to create a private API key, which is a unique identifier used for API calls, as well as define a scope.