TWILIO: Authentication tokens and how to change them
Twilio uses two credentials to determine which account an API request comes from: the account SID, which acts as the username, and the Auth Token which acts as the password. This guide explains how to find your Auth Token, and how to change it.
WARNING:
If another user gains access to your auth token and account SID, they will have full access to your account and will be able to use the Twilio API as if they were you. All users must take steps to keep their auth token confidential.
Where is my authentication token?
You can find your authentication token in the Info pane of the dashboard.

The authentication token for your account is hidden by default. Click on Show to display the token, and on Hide to hide it again.
What is a secondary authentication token?
A secondary authentication token is a backup of your primary authentication token. The secondary token works the same way as your primary token and can be used to keep your applications running during a token rotation. This allows you to switch your services from one token to another without service interruption.
When ready, secondary tokens can be promoted to primary token, replacing the previous primary token.
How can I change my authentication token?
WARNING:
The promotion of an authentication token secondary as authentication token primary instantly and automatically deletes the existing old primary authentication token from your account.
Immediately after promoting the new token, all requests made to Twilio using your old authentication token will result in a error. All existing Twilio applications using your old token will need to be updated with the new token before they can work again. To make this change without experiencing downtime, we recommend that users update their applications with the secondary token before promoting it as the primary token.
1. Go to the page Account > API keys and tokens in your console.
2. At the top right, select the region for which you want to modify the authentication token:

3. Scroll down the page to the section Auth Tokens, then click on
Request a secondary token

4. In the dialog box, click Request token.

5. Click on the icon
to display your new secondary token, and use it to update your existing Twilio applications. Make sure your applications are updated with your new secondary token before promoting it.
6. Click on Promote to Primary to make your newly created authentication token the primary token of your account. A dialog box will appear asking you to confirm the consequences. Once confirmed, the old primary token will stop working.
NOTE:
If you decide that you do not need the second token and want to continue using the first, click Delete this token to delete it.


