Update Access Token Lifetime

You can change the access token lifetime using the Auth0 Dashboard.

1. Go to Dashboard > Applications > APIs and select the name of the API to view.

   

2. Locate the Token Expiration field under Token Settings.

   

3. Enter the desired lifetime (in seconds) for access tokens issued for this API.

   • Default value is 86,400 seconds (24 hours).

   • Maximum value is 2,592,000 seconds (30 days).

4. Select Save Changes.

The Token Expiration For Browser Flows field refers to access tokens issued for the API through implicit and hybrid flows and does not cover all flows initiated from browsers.

For example, the PKCE flow (used in auth0-js-spa SDK) can be initiated from the browser, but it references the Token Expiration value, not the Token Expiration For Browser Flows value.

The lifetime of access tokens with the {yourAuth0Domain}/mfa audience are restricted to 600 seconds (10 minutes) for security reasons and cannot be modified.

• Update ID Token Lifetime