# How To Rotate Network Sign-in Keys With BetterShield?

Rotate WordPress sign-in keys across a multisite network and end every other active session.

In **[BetterShield](/)**, use **Network Admin › BetterShield › Network › Rotate the sign-in keys**.

## What it does

Rotation replaces the network's WordPress sign-in keys. Every other active session on every site ends and those users must sign in again with their normal method. The administrator performing the rotation stays signed in.

<span id="set-it-up" aria-hidden="true"></span>

## Step 1: Rotate Network Sign-in Keys

Select **Rotate the sign-in keys**, acknowledge **I understand every other session on every site will end**, then select **Rotate the sign-in keys** again.

<figure class="doc-shot">
  <img src="/docs/screenshots/network-sign-in-key-rotation.png" alt="Rotate the sign-in keys card explaining that other sessions on every site will end." width="1964" height="480" loading="lazy" decoding="async">
  <figcaption>The card requires an explicit understanding before the second rotation action becomes available.</figcaption>
</figure>

## Recommended settings

Use rotation after suspected session exposure or as a planned network-wide session reset. Notify site owners and confirm recovery paths first.

## What it can break and how to undo

The ended sessions cannot be restored, and the old keys cannot be put back through BetterShield. Users must sign in again. Saved work in applications that depend on a session may be interrupted.

<span id="check-it-is-working" aria-hidden="true"></span>

## Final Outcome

Use a separate test account in another browser before rotation. Afterward, that session should require sign-in while the initiating session remains active.

<figure class="doc-shot">
  <img src="/docs/screenshots/network-sign-in-key-rotation.png" alt="Rotate the sign-in keys card explaining that other sessions on every site will end." width="1964" height="480" loading="lazy" decoding="async">
  <figcaption>Example Rotate network sign-in keys view. Check the saved values and status on your own site.</figcaption>
</figure>

## Related

- [Use the network recovery link](/docs/network-recovery-link/)
- [Locked out](/docs/locked-out/)
- [Filter and search site activity](/docs/filter-activity-log/)

This is how you can rotate network sign-in keys with BetterShield.

Getting Stuck? Feel free to contact our [Dedicated Support Team](/support/).
