API tokens will now have a maximum one‑year expiry

[#1]

I got an email.

We're contacting you about an upcoming change to the API token default expiry duration. Currently, an API token has an infinite duration when created. To increase admin control over token management and your organization's security posture, all new API tokens will have a default one‑year expiry from the date of creation.

What's changing?

From December 15, 2024, new API tokens created by users will have a configurable duration of up to one year.

*Note: This does not affect existing API tokens. 

What do you think, will there be any impacts of this change with respect to where you have integrations built using API tokens.

Vijay

[Yatish Madhav]

Thanks for the article @Vijay Dadi 

I looked at the documentation link in the email - https://support.atlassian.com/atlassian-account/docs/manage-api-tokens-for-your-atlassian-account/ - and it does not look to have been updated yet it seems. I would expect it to mention this deadline and the change on there.

My first thoughts are that that is great - it instils better security in many peoples minds. I am also happy about the "Note: This does not affect existing API tokens" as we have about between 5 to 10 that are setup already.

What we do is we create recurring tasks for cases like this for me and our admins to manage so that we do not hit expiry unexpectedly.

Thanks again

[Vijay Dadi]

@Yatish Madhav ,

I agree, me myself built many automations/integrations with API tokens using service accounts. But I am happy that it will not affect existing tokens. This will new annual task for the admins.

Vj