---
title: blossom cache_instance:credentials:rotate
url: "/docs/reference/cli/cache_instance/credentials/rotate/"
canonical_url: https://docs.blossom88.com/docs/reference/cli/cache_instance/credentials/rotate/
markdown_url: https://docs.blossom88.com/docs/reference/cli/cache_instance/credentials/rotate.md
summary: Rotate the Cache instance password
categories:
- cli
- reference
---

# blossom cache_instance:credentials:rotate

Rotate the Cache instance password

## Usage

    blossom cache_instance:credentials:rotate --id ID [--yes] [--password-stdin] [--follow] [--timestamps]

## Flags

| Flag | Description |
| --- | --- |
| `--id (required)` | Cache instance id |
| `--yes, -y` | Skip the confirmation prompt |
| `--password-stdin` | Set the password read from stdin instead of generating one |
| `--follow, -f` | Follow password rotation logs |
| `--timestamps` | Show log timestamps. Default: true. |

Sets a new password inside Redis, including its replicas and standby, then
restarts every linked Environment so its apps receive the new connection URL.
The old password stops working as soon as the engine accepts the new one.

Connections pause briefly while the password changes and the linked
Environments restart. Memcached has no password, so it cannot be rotated.
Show the new password afterward with `cache_instance:credentials`.

    blossom cache_instance:credentials:rotate --id cache_instance-100 --follow
    blossom cache_instance:credentials --id cache_instance-100

To choose the password instead of generating one, pass it on stdin with
`--password-stdin` so it never appears in shell history or process listings.
It needs 8 to 64 characters: letters, digits, and `! # % * + , - . / : = ? @ ^ _ ~`.

    printf '%s' "$NEW_PASSWORD" | blossom cache_instance:credentials:rotate --id cache_instance-100 --password-stdin --yes