Auth Tokens and How to Change Them

Twilio uses two credentials to determine which project an API request is coming from: The Account SID, which acts as a username, and the Auth Token which acts as a password. This guide explains how to find your Auth Token, and how to change it.

Notice: If another user gets access to your Auth Token and Account SID, they will have full access to your project, and use of the Twilio API as if they were you. All users should take steps to keep their Auth Token private. For more recommendations, see Is Someone Else Using Your Twilio Account? Best Practices to Protect Your Auth Token (Twilio Blog).

If you are concerned someone has unauthorized use of your Twilio credentials, see Proactive Steps for Customers Experiencing Account Takeover.

Where is my Auth Token?

You can find the Auth Token in the Project Info pane of the Console Dashboard page.
Console Dashboard Project Info 

Your project's Auth Token is hidden by default. Click view to display the token, and hide to conceal it again.

How do I change my Auth Token?

Notice: Promoting a secondary Auth Token to the primary role instantly and automatically removes your old existing Auth Token from your project. Immediately after promoting the new token, all requests to Twilio using your old Auth Token will result in an error. Any existing Twilio apps using your old token will need to be updated with the new Auth Token before they can work successfully again. To make this change without incurring downtime, we recommend users update their apps with the secondary token prior to promoting it to primary.

  1. Access the Project Settings page in Console.
  2. Scroll down to the "API Credentials" section, and then click Request a Secondary Token.
    Pic02.png 
  3. In the pop-up dialog, click Request Token.
    Pic03.png 
  4. Click the Eye icon to view your new secondary token, and use it to update your existing Twilio applications.
    Pic04.png
  5. Once your existing Twilio apps are updated, Click Promote to Primary to make your newly created Auth Token the main token for your project. A dialog will pop-up asking you to acknowledge the consequences and confirm.
    Note: If you decide you don’t need the second token and want to keep using the primary one, click 
    Delete this Token to remove it.
Have more questions? Submit a request
Powered by Zendesk