Rotate the Key That Signs Visitor Passes
Retire your organisation's pass key after a kiosk is lost or stolen, without breaking passes already sent.
- Plans: Every plan
- Updated 27 October 2026
- 1 min read
Each visitor's pass carries a code signed with your organisation's own key, so a kiosk or guard can check it even with no connection.
Go to ConsoleSettingsSecurity and find Signed passes.
- Select Rotate key.
- Read what happens, then select Rotate the key.
Good to Know
- Do this if you think the key, or a kiosk holding it, has been lost or misused, or if a security review asks you to.
- Passes already sent keep working. Their visit pages show a freshly signed code.
- Kiosks pick up the new key the next time they sync.
- The rotation is recorded in the audit trail.
If Something Goes Wrong
- You're not sure whether to rotate. Passes already sent keep working, so if in doubt, rotate.
- A kiosk was stolen. Rotate the key, and unpair the device in ConsoleDevices too.
Was this helpful?
Still Stuck?
Ask in your own words. If it needs a person, we'll bring one in.