All installed package client secrets that you haven’t rotated since March 25, 2026 expire on September 30, 2026. All client secrets generated after March 25, 2026 have a 180-day expiration period, beginning on the day they’re generated. In the days before each client secret expires, you receive email notifications and see banner notifications in Marketing Cloud Engagement.
Where: This change applies to all Marketing Cloud Engagement editions.
When: If you last rotated a secret before March 25, 2026, it expires on September 30, 2026. If you rotated a secret after this date, the secret expires 180 days after you created it. We previously announced this change in the Spring ’26 release notes.
How: In Setup, on the Installed Packages page, open a package that contains a client secret to update. In the Staged Secret section, click Generate. Update all client apps that connect to the package to use the staged secret. After confirming that the client apps work as expected, click Activate to make the staged client secret active and revoke the previous client secret. This stage-test-activate process makes it possible to rotate client secrets without downtime.