# Refresh token expiry time

**URL:** <https://community.servicem8.com/t/refresh-token-expiry-time/1032>\
**Category:** API & SDK\
**Created:** [January 25, 2026, 5:03am UTC](https://community.servicem8.com/t/refresh-token-expiry-time/1032 "2026-01-25T05:03:57Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jack](https://avatars.discourse-cdn.com/v4/letter/j/cc9497/32.png) [@jack](https://community.servicem8.com/u/jack)\
**Post date:** [January 25, 2026, 5:03am UTC](https://community.servicem8.com/t/refresh-token-expiry-time/1032/1 "2026-01-25T05:03:57Z")

</div>

What is the expiry time on refresh tokens/do they expire?

I see access tokens expire in 1 hour and you’re given new refresh token each time you get a new access token, but what if I don’t request a new access token in two days to my users not needing anything ?

Currently looking at refreshing every hour to be safe, but would be nice to have some confirmation if they expire or not.

> **[Using the Access Token - Authentication](https://developer.servicem8.com/docs/authentication#using-the-access-token)**
>
> Private Applications (API Key)
> Private applications are designed for use cases where you are connecting to your own ServiceM8 account, or to one specific customer's account, and do not intend to promote/list your add-on on the ServiceM8 Add-ons...

Thanks!

---

<div class="post-metadata">

**Author:** ![Cody](https://sea2.discourse-cdn.com/flex002/user_avatar/community.servicem8.com/cody/32/52_2.png) [@Cody](https://community.servicem8.com/u/Cody)\
**Post date:** [January 25, 2026, 8:28am UTC](https://community.servicem8.com/t/refresh-token-expiry-time/1032/2 "2026-01-25T08:28:45Z")

</div>

Hi Jack,

Access tokens expire after 3600 seconds (one hour).

To continue accessing an account after an access token expires, you need to obtain a new access token using the refresh token.

To obtain a new access token, make a HTTP POST request to [https://go.servicem8.com/oauth/access\_token](https://go.servicem8.com/oauth/access_token), and the response will include a new refresh token.

Refresh tokens are valid for 1 year from issuing, so if you don’t request a new access token for a couple of days, your refresh token will still be valid.

As long as you refresh at least once per year, the refresh token will remain valid.

Thanks,  
Cody