There's more...

If you think that the key has been compromised, then you can regenerate it at any time by clicking on the Renew button. Note that when you renew a key, all the applications that access the function would no longer work and would give a 401 Unauthorized status code error.

You can delete or revoke the key if it is no longer used in any of the applications.

Here's a table with some more guidance on keys:

Key type

When should I use it?

Is it revocable (can it be deleted)?

Renewable?

Comments

Master key

When the Authorization level is Admin

No

Yes

You can use a master key for any function within the function app irrespective of the authorization level configured.

Host key

When the Authorization level is Function

Yes

Yes

You can use the host key for all the functions within the function app.

Function key

When the Authorization level is Function

Yes

Yes

You can use the function key only for a given function.

Microsoft doesn't recommend sharing the master key as it is also used by runtime APIs. Be extra cautious with master keys.