1 ---
2 title: Revoking access tokens
3 redirect_from:
4 - /revoking-authentication-tokens
5 ---
6
7 To keep your account and packages secure, we strongly recommend revoking (deleting) tokens you no longer need or that have been compromised. You can revoke any token you have created, including granular access tokens.
8
9 ## Revoking tokens on the website
10
11 1. In the upper right corner of the page, click your profile picture, then click **Access Tokens**.
12
13 2. Find the token you want to delete in the token list.
14
15 3. Click the **×** button next to the token, or select multiple tokens and click **Delete Selected Tokens**.
16
17 4. Confirm the deletion when prompted.
18
19 ## Revoking tokens using the CLI
20
21 1. To see a list of your tokens, on the command line, run:
22
23 ```
24 npm token list
25 ```
26
27 2. In the tokens table, find and copy the ID of the token you want to delete.
28
29 3. On the command line, run the following command, replacing `123456` with the ID of the token you want to delete:
30
31 ```
32 npm token delete 123456
33 ```
34
35 npm will report `Removed 1 token`
36
37 4. To confirm that the token has been removed, run:
38
39 ```
40 npm token list
41 ```
42
43 <Note>
44
45 **Note:** You must use the token ID to delete a token, not the truncated version of the token. In some cases, there may be a delay of up to an hour before a token is successfully revoked.
46
47 </Note>