# Get refresh tokens count

**URL:** <https://community.auth0.com/t/get-refresh-tokens-count/88887>\
**Category:** Get Help\
**Created:** [August 17, 2022, 11:28am UTC](https://community.auth0.com/t/get-refresh-tokens-count/88887 "2022-08-17T11:28:21Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![tadas](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/tadas/32/25932_2.png) [@tadas](https://community.auth0.com/u/tadas)\
**Post date:** [August 17, 2022, 11:28am UTC](https://community.auth0.com/t/get-refresh-tokens-count/88887/1 "2022-08-17T11:28:21Z")

</div>

Hi there,

recently we all got emails about 200 refresh token limit and we got that one of our tenants are exceeding this limit. We are trying to find which users are hitting this limit. Is it possible somehow see which users are hitting this limit through admin panel?

Thank you!

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [August 24, 2022, 4:17pm UTC](https://community.auth0.com/t/get-refresh-tokens-count/88887/3 "2022-08-24T16:17:24Z")

</div>

Hi @tadas,

Welcome to the Auth0 Community!

Is there a log for this error? It may list the user in question.

Let me know!

---

<div class="post-metadata">

**Author:** ![andreas.kern](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/andreas.kern/32/40048_2.png) [@andreas.kern](https://community.auth0.com/u/andreas.kern)\
**Post date:** [September 20, 2022, 10:05am UTC](https://community.auth0.com/t/get-refresh-tokens-count/88887/4 "2022-09-20T10:05:11Z")

</div>

Hi @dan.woda.

Same question here. I did not find a way to identify the user(s) which hit this limit. The log documentation mentions the error type resource\_cleanup, but nothing to find there. Maybe because the rule will be activated at October 17th for us. But we’d like to take action beforehand.

All the best,  
Andreas.

---

<div class="post-metadata">

**Author:** ![mohamed.safieddine](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mohamed.safieddine/32/40297_2.png) [@mohamed.safieddine](https://community.auth0.com/u/mohamed.safieddine)\
**Post date:** [September 28, 2022, 8:41am UTC](https://community.auth0.com/t/get-refresh-tokens-count/88887/5 "2022-09-28T08:41:55Z")

</div>

I have the same issue. Is there a way to find users that are exceeding the limit?

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [September 29, 2022, 7:19pm UTC](https://community.auth0.com/t/get-refresh-tokens-count/88887/6 "2022-09-29T19:19:57Z")

</div>

~~Could you please DM me the name of your tenant so I can take a look?~~

---

<div class="post-metadata">

**Author:** ![shiv.sehgal](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/shiv.sehgal/32/13031_2.png) [@shiv.sehgal](https://community.auth0.com/u/shiv.sehgal)\
**Post date:** [September 30, 2022, 5:28pm UTC](https://community.auth0.com/t/get-refresh-tokens-count/88887/7 "2022-09-30T17:28:33Z")

</div>

I am having the same issue. How to find out this also @dan.woda I have DM you please help us out.

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [October 6, 2022, 5:08pm UTC](https://community.auth0.com/t/get-refresh-tokens-count/88887/8 "2022-10-06T17:08:04Z")

</div>

Hi all,

I have an update on this front:

**As of right now, it’s not possible to identify the individual users via the dashboard. If you require a list of users hitting the limit, you will need to create a support ticket with the request via [support.auth0.com](http://support.auth0.com)**.

Also keep in mind:

> If the limit is reached and a new refresh token is created, the system revokes and deletes the oldest token for that user and application.

Here are some additional resources:

> **[Token Best Practices](https://auth0.com/docs/secure/tokens/token-best-practices#refresh-token-limits)**
>
> Lists best practices when using tokens in authentication and authorization.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [October 27, 2022, 11:40pm UTC](https://community.auth0.com/t/get-refresh-tokens-count/88887/9 "2022-10-27T23:40:46Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
