plexivo
Sign inContact sales

Rotate the database password

Give your Plexivo Postgres or Plexivo MySQL database a new password from the Connect tab, for example after a connection string leaked.

If a connection string was shared or leaked, give the database a new password. The old one stops working, and Plexivo hands the new one to the apps it connects for you. Your data, address and settings stay as they are.

Rotate it#

  1. Open the database’s Connect tab and find the Password card.
  2. Choose Rotate password, read what will happen, and confirm with Rotate password.
  3. Copy the new connection string shown under the button. It is shown once there; Reveal on the Connection string card shows the current one at any time.

You need to be able to manage the organisation’s resources. A database can be rotated once a minute.

What happens#

  • The old password stops working for new connections: at once on Plexivo Postgres, and on Plexivo MySQL as soon as the new one is applied (see below).
  • Connections already open keep running until they close.
  • Apps and Plexivo Kubernetes workloads you connected to the database in Plexivo receive the new password and restart onto it. So do the Data API, Realtime and Functions of a Plexivo Postgres backend.
  • Anything else that uses the old password, such as your own servers, tools and CI, stops connecting until you give it the new one. If you keep it in Plexivo Secrets, update it there.
  • The rotation is recorded in your organisation’s activity log, without the password.

Plexivo MySQL#

A Plexivo MySQL database applies its new password with a short job on its servers, so the rotation finishes in the background, usually within a minute. For the few seconds the job takes, the account is locked and new connections are refused; then the new password works. Apps you connected in Plexivo are updated once it does.

From the API#

bash
curl -X POST "https://api.plexivo.io/api/v1/tenants/$TENANT_ID/databases/$DATABASE_ID/credentials/rotate" \
  -H "Authorization: Bearer $PLEXIVO_TOKEN"

The answer carries the new connection details once, with rotation.state set to rotated for Plexivo Postgres (HTTP 200) or applying for Plexivo MySQL (HTTP 202). Keep the answer out of your logs.

Next steps#

Connect to Plexivo PostgresConnection strings, TLS and the private address. Connect to Plexivo MySQLConnection details for your app and your tools.

Updated 27 October 2026