doc: password reset no longer revokes tokens (#127)
This was the only place it was documented. We've updated this behavior as we no longer have the same risk to tokens on password reset with login verification
Myles Borins committed
May 25, 2022 at 13:21 UTC
9153c5d02c006d1473b1717d07cb760073d3fddd
1 file changed
-6
content/integrations/integrating-npm-with-external-services/revoking-access-tokens.mdx
-6
@@ -5,12 +5,6 @@ redirect_from: [ /revoking-authentication-tokens ]
5
6
To keep your account and packages secure, we strongly recommend revoking (deleting) tokens you no longer need or that have been compromised. You can revoke any token you have created.
7
8
-<Note>
9
-
10
-**Note:** While access tokens are not derived from your password, changing your password will invalidate all of your tokens. You can also invalidate a single token by logging out on a machine that is logged in with that token. We recommend revoking rather than invalidating tokens.
11
-
12
-</Note>
13
-
8
1. To see a list of your tokens, on the command line, run:
9
10
```