OpenAI Enforces API Key Expiration at the Org Level: What Every Gateway Operator Must Audit Now
OpenAI now lets org admins enforce a maximum key lifetime across all projects. Combined with Anthropic's mandatory expiration policy from July, both major providers now require key rotation — with meaningfully different enforcement models operators must handle separately.
via OpenAI
