Auto-destroy overdue
Submitted credentials are destroyed at their retention deadline by a background sweep. If you see Auto-destroy overdue, a record has passed its deadline but hasn’t been deleted yet.
Is my credential exposed?
Section titled “Is my credential exposed?”No. A credential past its deadline can no longer be revealed — the ability to decrypt ends at the deadline. “Overdue” means only that the deletion of the (already un-revealable) envelope hasn’t run yet. It’s an operations matter, not a security exposure.
What to do
Section titled “What to do”- On the hosted service, this clears itself when the sweep next runs; no action is needed.
- If it persists, contact support — we’ll clear it.