Jul 15, 2026: Named key pair management for users¶

You can now use SQL to register, rotate, modify, and remove named key pairs for a user. Each key pair has its own name and supports an optional role restriction and expiration time.

Named key pairs improve on the legacy approach of setting the RSA_PUBLIC_KEY and RSA_PUBLIC_KEY_2 user properties, which Snowflake continues to support.

For more information, see the following topics:

• Key-pair authentication and key-pair rotation
• ALTER USER … ADD KEY PAIR
• ALTER USER … MODIFY KEY PAIR
• ALTER USER … ROTATE KEY PAIR
• ALTER USER … REMOVE KEY PAIR
• SHOW USER KEY PAIRS