# Disabling refresh token rotation \> impact?

**URL:** <https://community.auth0.com/t/disabling-refresh-token-rotation-impact/101456>\
**Category:** Get Help\
**Tags:** configuration, application\
**Created:** [February 28, 2023, 10:34am UTC](https://community.auth0.com/t/disabling-refresh-token-rotation-impact/101456 "2023-02-28T10:34:21Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![zenonz](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@zenonz](https://community.auth0.com/u/zenonz)\
**Post date:** [February 28, 2023, 10:34am UTC](https://community.auth0.com/t/disabling-refresh-token-rotation-impact/101456/1 "2023-02-28T10:34:21Z")

</div>

Simple question – but one for which I couldn’t see the answer in any docs or threads.

We currently have refresh token rotation enabled. However, I would like to turn it off as the security benefits are not so significant in our use case, and we don’t want users to require internally managing and renewing a long-lived token every 6 months.

I want to understand if disabling it will affect current tokens – i.e. will existing refresh tokens be invalidated or face issues (other than their existing expiry being in force).

We have production users using these for automated API queries so I need to be sure of this before toggling it off… and it’s just not clear anywhere if switching from enabled \> disabled has such consequences.

---

<div class="post-metadata">

**Author:** ![ty.frith](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ty.frith/32/58484_2.png) [@ty.frith](https://community.auth0.com/u/ty.frith)\
**Post date:** [March 2, 2023, 1:46am UTC](https://community.auth0.com/t/disabling-refresh-token-rotation-impact/101456/3 "2023-03-02T01:46:25Z")

</div>

Hi there @zenonz welcome to the community!

> [@zenonz](#):
>
> I want to understand if disabling it will affect current tokens – i.e. will existing refresh tokens be invalidated or face issues (other than their existing expiry being in force).

When you disable the rotation, it will have one last rotation. The last rotation will give you a non rotating RT so it shouldn’t have a negative effect on the users.

Hope this helps!

---

<div class="post-metadata">

**Author:** ![zenonz](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@zenonz](https://community.auth0.com/u/zenonz)\
**Post date:** [March 6, 2023, 9:54am UTC](https://community.auth0.com/t/disabling-refresh-token-rotation-impact/101456/4 "2023-03-06T09:54:05Z")

</div>

Thanks! That helps a lot, situation clarified 👍

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 20, 2023, 9:54am UTC](https://community.auth0.com/t/disabling-refresh-token-rotation-impact/101456/5 "2023-03-20T09:54:26Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.