An Azure Storage account access key is a long-lived secret that grants Shared Key access to a storage account. With it, a user or service can authenticate directly to blobs, files, queues, or tables without using Microsoft Entra ID. Each storage account has keys that effectively act like a master password for that account.
This matters because anyone who steals the key can often read, write, or delete data and create new access tokens for later use. Attackers commonly try to harvest keys after compromising a service principal or other cloud identity, then reuse them even after the original account is disabled. Defenders should prefer identity-based access, restrict who can list keys, monitor key-retrieval activity, and rotate keys quickly after any suspected exposure.