# Change a widget's settings > Rename a Wicket widget, change its hostnames, mode and appearance, turn off Wicket's name, rotate its secret key or delete it. Source: https://www.coritan.com/docs/wicket/widget-settings/ In the dashboard: - /dashboard/security/wicket/…/settings: https://www.coritan.com/dashboard/security/wicket The **Settings** tab of a widget holds everything about it that you can change: its name, the hostnames it works on, its mode, how it looks when your page sets nothing, whether it shows Wicket's name, and its secret key. It ends with the danger zone, where you delete the widget. ## Before you begin - You need the Admin or Technical role. Other roles see the same cards as plain facts, with no field, no button and no link that changes anything, and a notice, **You can read these settings**. - The tab is the third tab of a widget. In the [dashboard](https://www.coritan.com/dashboard/security), go to **Security**, select **Open Wicket**, open the widget, then select **Settings**. Each card saves on its own with **Save changes**, which stays greyed out until something on the card has changed. A message confirms the change, such as `Name saved.`, and the card keeps its new values. When we refuse a change, **Could not save** and the card's name appear on the card, and the fields keep what you entered. ## Name Enter a new name of up to 100 characters and select **Save changes**. The heading of the page changes with it. Only you see the name. ## Hostnames The **Hostnames** card has the same field as the **Add a widget** page. Enter a hostname and press Enter, select **Add hostname**, or select the **x** on a tag to remove it. The count under the field reads `3 of 10 hostnames`, with your plan's limit for one widget, and turns red when the list is over it. A hostname covers itself and every name under it, so `example.com` covers `www.example.com`. `www.example.com` does not cover `example.com`. When a page asks for a challenge from a hostname the widget does not list, the widget shows in the list as needing attention with **Asked from a page whose hostname the widget does not list**. Add the hostname here to clear it. A name the page can tell is wrong keeps its tag, in red, with the reason under the field. A name we refuse when you save is marked the same way, with our sentence. At least one hostname must stay. Over your plan's limit, a window names the limit and the plan that raises it ([Wicket limits](/docs/wicket/limits/#plan-limits)). ## Mode Choose **Managed**, **Non-interactive** or **Invisible** and select **Save changes**. [Widget modes](/docs/wicket/widget-modes/) describes each mode. ## Appearance **Appearance** is what the widget uses when the page that shows it sets none of these itself. A setting on the page, in the snippet's `data-` attributes or in the script, wins. Theme : **Match the page**, **Light** or **Dark**. Size : **Normal**, **Flexible** or **Compact**. Language : **The visitor’s language**, or one of the 18 languages the widget speaks: Arabic, Bulgarian, Czech, German, English, Spanish, French, Hindi, Indonesian, Italian, Dutch, Polish, Portuguese, Romanian, Russian, Turkish, Ukrainian and Vietnamese. ## Branding **Show Wicket’s name on the widget** is on by default. On a Business or Enterprise account you can switch it off and select **Save changes**. On any other plan the switch is locked on and the card offers the plan that unlocks it. After a downgrade, a widget that was without Wicket's name shows it again, whatever the switch says. ## Secret key The **Secret key** card shows the key's first characters under **Starts with**, when it was **Last rotated**, and, while the old key still works, **Old key works until** and the time. We keep only a fingerprint of the key, so we cannot show it again. ### Rotate the secret key {#rotate-the-secret-key} Rotate the key when you lose it, when someone who had it leaves, or when it might have leaked. The new key is shown once. 1. On the **Secret key** card, select **Rotate secret key…**. The **Rotate the secret key** page opens under the widget's tabs. 2. Choose what happens to the key you have now: - **Keep the old key working for 2 hours**, the default, so you can put the new key on your servers before the old one stops. - **Stop the old key now**, so every server still using the old key fails its checks until you update it. 3. Select **Rotate secret key**. **Cancel**, which reads **Keep the current key** on this page, leaves without changing it. The page shows the new key under **Save the new secret key now**, hidden until you select **Reveal**. Select **I have saved the secret key** when you have copied it. Leaving by a link first asks **Leave without saving the secret key?**. The account owner is emailed when a secret key is rotated. On a rotation that keeps the old key, both keys work for 2 hours, and **Old key works until** shows when the old one stops. Rotating again before then replaces the old key: only the key you had just before the rotation keeps working. Update your server to read the new key from its settings, which [Install a widget](/docs/wicket/install-a-widget/#check-the-token-on-your-server) shows. ## Delete a widget > [!CAUTION] > The forms that use the widget stop passing checks at once, and a deleted widget cannot be brought back. Its site key and secret key stop working. 1. At the foot of the tab, in the **Danger zone**, select **Delete widget…**. 2. Type the widget's name to confirm. The comparison ignores capitals. 3. Select **Delete widget**. A message confirms `"Sign-up form" deleted.` and the **Wicket** list opens. You can also delete a widget from the menu on its card in the list. ## Result Each save shows its message, and the page's header and the cards show the new values. A rotated key shows a new **Starts with** and a new **Last rotated**. ## Troubleshooting `Enter a name, such as Sign-up form.` : A name cannot be empty. Use 1 to 100 characters. `Could not save the hostnames` : Our reason is under the field. Remove or correct the tag it names, then save again. **Could not rotate the secret key** : Our reason is on the page. The choice stays selected, so select **Rotate secret key** again. **Your role cannot rotate the secret key** : Only Admin and Technical members rotate keys. Ask one of them. Forms fail after a rotation : The server still sends the old key and you chose **Stop the old key now**, or the 2 hours ended. Put the new key in the server's settings. ## Related - [Add a widget](/docs/wicket/add-a-widget/) - [Manage widgets with the API](/docs/wicket/manage-widgets-with-the-api/) - [Widget modes](/docs/wicket/widget-modes/) - [Wicket limits](/docs/wicket/limits/) ## Next steps - [Install a widget](/docs/wicket/install-a-widget/) to put a new secret key on your server. - [Read a widget's analytics](/docs/wicket/widget-analytics/) to check a change took effect. - [Troubleshoot Wicket](/docs/wicket/troubleshooting/) if forms fail after a change.