Long-Lived Token

Definitions

1. An access, refresh, or API token with a relatively long validity period before expiration or forced rotation. Long-lived tokens improve convenience and service continuity, but they greatly increase the damage an attacker can do if the token is stolen.

   In plain English: A token that stays valid for a long time, making theft more dangerous.

   Example: "The incident spread across environments because the leaked CI secret was a long-lived token with broad API scope."

Related Terms

• JWT
• Access Token
• Account Lockout
• Authentication Factor
• Authentication Protocol
• Authentication Token
• Hardware Token
• Physical Token
• API Token