If you suspect that your site's credentials might have been compromised, you should use Reset authentication to rotate all your site's keys and secrets. Every staff user — including you — will be logged out and forced to set a new password.

1. Go to Settings → Advanced → Danger zone.
2. Click Reset.
3. Ghost rotates your keys, resets staff accounts, and signs everyone out. You'll land back at the sign-in screen.
4. Each staff user will be prompted to set a new password on the next sign-in.

• Integrations will stop working. Each API key in Settings → Advanced → Integrations is replaced with a new secret. You'll need to reconfigure each integration with the newly generated secrets.
• Ghost will not rotate the Mailgun and Stripe keys. Please rotate these manually.
• Members and their subscriptions are remain untouched. They stay signed in and can continue to sign in with magic link emails as usual.
• Settings, themes, posts, pages, tags, and settings are all untouched. Only authentication credentials are reset.