{"article":{"id":14977184144023,"url":"https://plaid.zendesk.com/api/v2/help_center/en-us/articles/14977184144023.json","html_url":"https://support.plaid.com/hc/en-us/articles/14977184144023-Do-access-tokens-expire","author_id":396033157154,"comments_disabled":true,"draft":false,"promoted":false,"position":4,"vote_sum":0,"vote_count":0,"section_id":15991413068951,"created_at":"2023-05-31T22:09:26Z","updated_at":"2026-06-01T01:59:27Z","name":"Do access tokens expire?","title":"Do access tokens expire?","source_locale":"en-us","locale":"en-us","outdated":false,"outdated_locales":[],"edited_at":"2026-06-01T01:59:27Z","user_segment_id":null,"permission_group_id":1121774,"content_tag_ids":[],"label_names":[],"body":"

An access_token is a token used to make API requests related to a specific Item. Access tokens do not expire, although they may require updating. For example, updating is needed when a user changes their password or when working with European institutions that comply with PSD2's 90-day consent window. For more information, see when to use update mode.

\n

If compromised, an access_token can be revoked via /item/access_token/invalidate; this endpoint returns a new access_token and immediately invalidates the previous access_token. If no longer needed, it can be revoked via /item/remove.

\n

If, for any reason, an Item ever does need re-authentication, any API call will return the ITEM_LOGIN_REQUIRED error. To track Items that go into this error state, you will want to implement webhooks.

","user_segment_ids":[]}}