# Deleted Google API Keys Remain Active for Extended Period
Security researchers have discovered that Google API keys continue to function for up to 23 minutes after deletion, creating a potential security vulnerability. The delayed deactivation window could allow unauthorized access if deleted keys are compromised during the grace period before they fully cease operation.
