--- title: "Threat hunters find Google API keys still usable 23 minutes after deletion" url: https://daily.dev/posts/threat-hunters-find-google-api-keys-still-usable-23-minutes-after-deletion-rk0u906da source_url: https://www.theregister.com/devops/2026/05/21/threat-hunters-find-google-api-keys-still-usable-23-minutes-after-deletion/5244504 type: article source: "The Register" published: 2026-05-21T20:25:47.683Z updated: 2026-05-21T20:26:08.672Z tags: ["security", "google"] reading_time: 5 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Threat hunters find Google API keys still usable 23 minutes after deletion **[The Register](https://daily.dev/sources/theregister)** · 5 min read · 0 upvotes · 0 comments ## Summary Security researchers discovered that Google API keys remain functional for approximately 23 minutes after being deleted, creating a window of opportunity for attackers to exfiltrate data or rack up charges on a victim's account. This propagation delay in credential revocation poses a real risk for developers who delete compromised keys expecting immediate protection. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Google API keys keep working after you delete them long enough to be exploited](https://daily.dev/posts/google-api-keys-keep-working-after-you-delete-them-long-enough-to-be-exploited-hekfmi5jr) · Aikido Security · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#google](https://daily.dev/tags/google) [View this post on daily.dev](https://daily.dev/posts/threat-hunters-find-google-api-keys-still-usable-23-minutes-after-deletion-rk0u906da)