Secondary Auth Token

❗️

WARNING

If you are using Services or Functions(Classic) and have included your auth token directly instead of using a variable, you must wait for 1 minute for the update of your auth token to propagate. Otherwise, those functions and services will fail with a 403 Forbidden error.

Twilio uses the Account SID and Auth Token to authenticate API requests. However, you can also create a secondary Auth Token. A secondary Auth Token is a backup to your primary Auth Token and works the same way as your primary token. Secondary Auth tokens can be promoted to the primary token, thereby replacing the previous primary token.

Secondary Auth Token properties

When you create a Secondary Auth Token, you will get the following properties in the response:

PropertiesDescriptionPII status
account_sid
SID(AC)
The SID of the Account that the secondary Auth Token was created for.

Pattern: ^AC[0-9a-fA-F]{32}$
Min length: 34
Max length: 34
NOT PII
date_created
string(date-time)
The date and time in UTC when the resource was created specified in ISO 8601
format.
NOT PII
date_updated
string(date-time)
The date and time in UTC when the resource was last updated specified in ISO 8601 format.NOT PII
secondary_auth_token
string
The generated secondary Auth Token that can be used to authenticate future API requests.PII MTL: 0 days
url
string(uri)
The URL for this resource, relative to https://accounts.twilio.comNOT PII

The Auth Token can be rotated in the Console or with this API. The Twilio REST API can be used to,

  1. Create a Secondary Auth Token.
  2. Promote a secondary Auth Token.
  3. Delete a Secondary Auth Token.