Revoke a Personal Access Token
Revoke a Personal Access Token immediately.
Goal
Stop a token from being used after it is no longer needed or has been exposed.
Revoking a token is permanent. A revoked token cannot be restored.
Steps
- Open
Personal Access Tokens - Select the token you want to revoke
- Click
REVOKE - Confirm
REVOKE TOKEN
Result
- The token can no longer authenticate requests
- Its status changes to revoked
Common issues
- You cannot revoke it: confirm you have permission to manage the token
- Revoked token still appears active: refresh the list