Rotate an Account's Authentication Key

Rotating the account's authentication key allows you to use a new private key. You must provide a new private key. Once it is rotated you will need to use the original account address, with the new private key. There is an interactive prompt to help you add it to a new profile.


movement aptos account rotate-key [OPTIONS]


  • --sender-account <SENDER_ACCOUNT> Sender account address. This allows you to override the account address from the derived account address in the event that the authentication key was rotated or for a resource account

  • --private-key-file <PRIVATE_KEY_FILE> Signing Ed25519 private key file path. Encoded with type from --encoding. Mutually exclusive with --private-key

  • --private-key <PRIVATE_KEY> Signing Ed25519 private key. Encoded with type from --encoding. Mutually exclusive with --private-key-file

  • --encoding <ENCODING> Encoding of data as one of [base64, bcs, hex]. [default: hex] Possible values:

    • bcs: Binary Canonical Serialization

    • hex: Hex encoded e.g. 0xABCDE12345

    • base64: Base 64 encoded

  • --profile <PROFILE> Profile to use from the CLI config. This will be used to override associated settings such as the REST URL, the Faucet URL, and the private key arguments. Defaults to "default"

  • --url <URL> URL to a fullnode on the network. Defaults to the URL in the default profile

  • --connection-timeout-secs <CONNECTION_TIMEOUT_SECS> Connection timeout in seconds, used for the REST endpoint of the fullnode. [default: 30]

  • --gas-unit-price <GAS_UNIT_PRICE> Gas multiplier per unit of gas. The amount of Octas (10^-8 MOV) used for a transaction is equal to (gas unit price * gas used). The gas_unit_price can be used as a multiplier for the amount of Octas willing to be paid for a transaction. Without a value, it will determine the price based on the current estimated price

  • --max-gas <MAX_GAS> Maximum amount of gas units to be used to send this transaction. The maximum amount of gas units willing to pay for the transaction. This is the (max gas in Octas / gas unit price). Without a value, it will determine the price based on simulating the current transaction

  • --expiration-secs <EXPIRATION_SECS> Number of seconds to expire the transaction. This is the number of seconds from the current local computer time. [default: 30]

  • --assume-yes Assume yes for all yes/no prompts

  • --assume-no Assume no for all yes/no prompts

  • --profile-gas If this option is set, simulate the transaction locally using the debugger and generate flamegraphs that reflect the gas usage

  • --new-private-key-file <NEW_PRIVATE_KEY_FILE> File name that contains the new private key encoded in the type from --encoding

  • --new-private-key <NEW_PRIVATE_KEY> New private key encoded in the type from --encoding

  • --save-to-profile <SAVE_TO_PROFILE> Name of the profile to save the new private key. If not provided, it will interactively have you save a profile, unless --skip-saving-profile is provided

  • --skip-saving-profile Skip saving profile. This skips the interactive profile saving after rotating the authentication key

Last updated