Effects of changing Django’s SECRET_KEY

I made a mistake and committed my Django project’s SECRET_KEY into a public repository.

This key should have been kept secret according to the docs.

The Django project is live and has been running for a while with some active users. What are the effects if I change the SECRET_KEY? Will any existing users, cookies, sessions, etc.. be affected? Obviously, the new SECRET_KEY will no longer be stored in a public location.

6 Answers
6

Leave a Comment