Rotate Pairing Token

To keep your security risk low in JFrog Connect, you can rotate the pairing token.

JFrog Connect uses tokens and enables token rotation according to the JWT standard. Token rotation is a security mechanism designed to minimize the risks associated with token theft and unauthorized use. When you rotate the pairing token in Connect, you replace the token with a new one.

If you suspect that a token has been compromised, or if you just want to keep your security risk low, you can rotate or revoke the pairing token at any time.

To rotate the pairing token, do the following:

1. In Fleet Settings, go to the Pairing Token tab and locate the relevant Token ID. If you don’t see the token in the table, you can use the filter on the right to find it.

2. In the row of the relevant Token ID, click the More icon (three dots) on the far right and choose Rotate.

You can follow the status of the token by hovering over the Rotation Status column in the table. The popup will show you the number of devices in each state:

• Pending

• In Progress

• Failed

What’s Next?

Learn how to:

• Abort a token rotation.

• Revoke a pairing token once it has been created.