Your OpenAI, Claude or Gemini API Key Compromised? Here's What to Do

What to do if you wake up and understand that the company to which you gave your API keys from your AI providers has been a target of the hack. For instance, today, it happened with OpenCode, but it may happen with any company which is having your API keys. First of all, log in to the provider of your model, to Google, to OpenAI, to Anthropic, and revoke the API keys which you have given to this other product which has been hacked. If you don't remember which API keys you have given to this product, just revoke all the API keys.

Second one, set up the limits to the reissued API keys. It can be $20. It can be $100, but just some amount which you are ready to lose if something bad happens. And third, always choose really well the companies or the services which are asking your API keys from Anthropic, OpenAI, Google, or other frontier companies because they can be a target of some distillation attacks, and you just want to be sure that the security team which is working on these products is strong enough to prevent such attacks.