---
schema_version: "1"
id: 29a57030710c109c456a1b7772f44fa153088b19d1c03873db6d54d87dcb969a
title: Prepare to Rotate Client Secrets for Installed Packages
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/264-0-0/rn_mce_client_secrets_rotate.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_mce_client_secrets_rotate.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 87c82a233ac0037dabba8ab2b66da2b72721abcbb9f2323209c57fa80ceb4d35
description: All installed package client secrets that you haven’t rotated since March 25, 2026 expire on September 30, 2026. All client secrets generated after March 25, 2026 have a 180-day expiration period, beginning on the day they’re generated. In the days before each client secret expires, you receive email notifications and see banner notifications in Marketing Cloud Engagement.
products:
  - Cross Cloud
release: "264"
---
# Prepare to Rotate Client Secrets for Installed Packages

All installed package client secrets that you haven’t rotated since March 25, 2026 expire on September 30, 2026. All client secrets generated after March 25, 2026 have a 180-day expiration period, beginning on the day they’re generated. In the days before each client secret expires, you receive email notifications and see banner notifications in Marketing Cloud Engagement.

**Where:** This change applies to all Marketing Cloud Engagement editions.

**When:** If you last rotated a secret before March 25, 2026, it expires on September 30, 2026. If you rotated a secret after this date, the secret expires 180 days after you created it. We previously announced this change in the Spring ’26 release notes.

**How:** In Setup, on the Installed Packages page, open a package that contains a client secret to update. In the Staged Secret section, click **Generate**. Update all client apps that connect to the package to use the staged secret. After confirming that the client apps work as expected, click **Activate** to make the staged client secret active and revoke the previous client secret. This stage-test-activate process makes it possible to rotate client secrets without downtime.