# Rotate or revoke a device token (https://logable.app/docs/guides/devices/rotate-or-revoke-a-device-token)

Replace a token without the device dropping off, or cut it off at once.



A device token is the device's password. Rotate it on a schedule, or revoke it at once if it leaks.

1. Open the device's page and select the **Connection** tab.
2. Find **Authentication Tokens**.
3. Select **Regenerate Token**. Give it an optional Token Name so you can tell tokens apart later, then select **Regenerate** to confirm.
4. The **New Token Generated** dialog shows the new token. Select **Download Credentials**, or copy the token. It will not be shown again.
5. Update the device with the new token.

The confirm screen says every active token is revoked. In practice, the old token keeps working for 24 hours after you regenerate, so a device out in the field does not drop off while you update it. The app does not show a countdown for this grace period, but it holds.

To cut a token off at once, with no grace period, select **Revoke** on its row in the Authentication Tokens list. Do this if a token leaks. The device cannot send readings again until it has a new token.

<Figure src="/docs/captures/device-tokens.webp" alt="The Authentication Tokens list on a device's Connection tab, with a Regenerate Token action and one token row marked revoked" width="1400" height="681" sizes="(min-width: 1280px) 860px, (min-width: 640px) 90vw, 100vw" caption="Authentication Tokens, on the device's Connection tab." />

## Who can do this [#who-can-do-this]

Rotating or revoking a device token needs the owner role.

## Next [#next]

* [Connect a device](/docs/guides/devices/connect-a-device)
* [Device tokens](/docs/integrate/device-tokens)
* [Build a dashboard](/docs/guides/dashboards/build-a-dashboard)