diff --git a/server/auth/verifyVirtualApiKey.ts b/server/auth/verifyVirtualApiKey.ts
index 354a27e74..8cd39fb98 100644
--- a/server/auth/verifyVirtualApiKey.ts
+++ b/server/auth/verifyVirtualApiKey.ts
@@ -62,11 +62,6 @@ function parseVkCredential(
     };
 }
 
-/**
- * Extract a virtual API key credential from provider-style auth headers.
- * Checks Authorization Bearer / Splunk, x-api-key, x-goog-api-key, and
- * cf-aig-authorization. First matching vk-{id}.{secret} wins.
- */
 export function extractVirtualApiKeyCredential(
     headers: Record<string, string> | undefined
 ): VirtualApiKeyCredential | null {
diff --git a/src/lib/virtualApiKeyFormat.ts b/src/lib/virtualApiKeyFormat.ts
index f09686c15..9059d3016 100644
--- a/src/lib/virtualApiKeyFormat.ts
+++ b/src/lib/virtualApiKeyFormat.ts
@@ -1,4 +1,4 @@
-export const VIRTUAL_API_KEY_PREFIX = "vk-";
+export const VIRTUAL_API_KEY_PREFIX = "pangolin-key-";
 
 const VIRTUAL_API_KEY_AUTH_HEADER_NAMES = [
     "authorization",