near-cli and near-api-js - key rotation steps for accounts

steps.js

// go to https://near.github.io/seed-recovery/ and click the random button at the bottom
// copy publicKey AND seed phrase somewhere SAFE
// use the same tool to find the public key of an existing seed phrase OR call
near keys [accountId]

// once you have both public keys AND the new seed phrase SAFELY STORED
near add-key [accountId] [newPublicKey]
near delete-key [accountId] [oldPublicKey]

// Reference: https://www.npmjs.com/package/near-cli#near-add-key

// Using JS
const result = await account.addKey([newPublicKey])
// CHECK RESULT IS SUCCESSFUL BEFORE DELETING OLD KEY!!!
const keys = await account.getAccessKeys()
// some loop, is my newPublicKey there???
account.deleteKey([oldPublicKey])

// Using JS 1 TX safer because will fail and do nothing or success and rotate keys
// import actions here nearAPI.transactions[actionName]
const actions = [
  addKey([newPublicKey]),
  deleteKey([oldPublicKey]),
]
account.signAndSendTransaction({
  receiverId: account.accountId,
  actions,
})

// note: if the keys are the same publicKey, you will need to delete before you add, so the single TX method is the safest