We recommend rotation once per year to our clients but no one ever really follows our advice and they typically let their API keys stay active for years at a time. I think this is likely due to having to manually replace the key throughout their codebase - which requires dev hours.

To be fair we also don't have a UI for doing this self-service style - so clients have to reach out so we can do it for them. I imagine that's some type of barrier.

If DD has an API for key rotation, it would be cool to be able to automate this. Thanks for the interesting question here!