# Other FAQ
# How Can I Reset My OAuth and Webhook URLs?
What's Happening:
You may need to reset your OAuth and Webhook URLs for various reasons within the AppSumo Partner Portal (opens new window).
To update your OAuth and Webhook URLs in the AppSumo Partner Portal (opens new window), contact your Launch Operations Associate directly. They will invalidate your current URLs and reopen them for further testing.
Important:
- When updating your URLs in the AppSumo Partner Portal (opens new window), it's essential to also update them on your back end to ensure they match exactly
- It's crucial that once your product is live on AppSumo, you do not change these URLs, as this will break the connection between AppSumo and your system.
For detailed information, see OAuth Getting Started.
# How Do I Rotate My Private Key or Client Secret?
Open your listing in the AppSumo Partner Portal (opens new window), go to Redemption, and use Rotate next to the key.
There are two ways to rotate:
- Keys leaked (recommended). The old key stops working the moment you rotate. Webhooks that fail while you update your server are retried every 5 minutes for about 25 minutes, so deploy the new key within 20 minutes.
- Planned rotation. The old key keeps working for 60 minutes, then stops. You can end it earlier with Stop old key now. While both keys work, a webhook your server refuses with 400, 401 or 403 is re-sent at once signed with the old key, so you don't miss events while you deploy.
After you deploy, use the test buttons on the same page (Send test webhook, Check private key, Test OAuth) to confirm the new key works. Rotating the OAuth client secret never changes your client ID.