If you think that the key has been compromised, then you can regenerate it at any time by clicking on the Renew button. Note that when you renew a key, all the applications that access the function would no longer work and would give a 401 Unauthorized status code error.
You can delete or revoke the key if it is no longer used in any of the applications.
Here's a table with some more guidance on keys:
Key type |
When should I use it? |
Is it revocable (can it be deleted)? |
Renewable? |
Comments |
Master key |
When the Authorization level is Admin |
No |
Yes |
You can use a master key for any function within the function app irrespective of the authorization level configured. |
Host key |
When the Authorization level is Function |
Yes |
Yes |
You can use the host key for all the functions within the function app. |
Function key |
When the Authorization level is Function |
Yes |
Yes |
You can use the function key only for a given function. |