---
title: "Manage an access token"
description: "Edit, reset, disable, enable, or delete a Container Registry access token in MyAccount, and see which actions a token allows."
content_type: "how-to"
product: "container-registry"
platform: "MyAccount"
url: "/myaccount/container-registry/how-to/manage-an-access-token/"
topic: ["security-and-access"]
relationships: {"requires":["/myaccount/container-registry/how-to/create-an-access-token/"]}
---

# Manage an access token

Change a token's expiry or permissions, give it a new value, turn it off for a while, or delete it.

## Before you begin

You need an access token in a registry project and, if you are a team member, a role with the update
and delete permissions for Container Registry. See [Create an access
token](/myaccount/container-registry/how-to/create-an-access-token/).

## Find the token

In MyAccount, under **Storage**, click **Container Registry**, and click your project. Open its
**Access token** tab. Every action is in the token's **Actions** menu.

## When each action is available

- **Edit** and **Reset** are available for an enabled token that has not expired.
- **Enable** and **Disable** are available for a token that has not expired.
- **Delete** is always available.

Each action asks you to confirm in a **Confirm <action> Token** dialog. Check the box that begins
**I acknowledge the above content and wish to proceed with**, then click the action's button.

## Change the expiry, permissions, or description

1. In the token's **Actions** menu, click **Edit**. **Edit Token** opens.
2. Change the expiry under **Expiration**, check or clear **Push** under **Permissions:**, or change
   the **Description**. The name stays as it is.
3. Click **Update**, and confirm.

## Reset the token value

Reset a token when you have lost its value, or when someone else has seen it. The token gets a new
value, and the old value stops working.

1. In the token's **Actions** menu, click **Reset**, and confirm.
2. The **Access Token** dialog shows the **Token Name** and the new **Token Value**. Copy the value
   now: it **will not be accessible again**.

Log in again everywhere the token is used, with the new value. For a Kubernetes cluster, delete the
secret with `kubectl delete secret <secret-name> --namespace <namespace>`, then create it again with
the new value; see
[Pull images from a Kubernetes pod](/myaccount/container-registry/how-to/pull-images-from-a-kubernetes-pod/).

## Disable or enable a token

To turn a token off for a while without deleting it, click **Disable** in its **Actions** menu, and
confirm. To make it work again with the same value, click **Enable**, and confirm. To reset a
disabled token, enable it first.

## Delete a token

Deleting a token is permanent, and anything that uses it loses access at once. Deleting one also
makes room for a new token when the project has five.

1. In the token's **Actions** menu, click **Delete**.
2. In **Confirm Delete Token**, check the box that begins
   **I acknowledge the above content and wish to proceed with**, and click **Delete**.

The token leaves the list. For an expired token, delete it and create a new one; see
[Create an access token](/myaccount/container-registry/how-to/create-an-access-token/). Your tokens
now match the systems that use them. To give a new system access, see
[Create an access token](/myaccount/container-registry/how-to/create-an-access-token/). If an action
is not available or is refused, see
[Troubleshooting Container Registry](/myaccount/container-registry/troubleshooting/container-registry/#edit-reset-enable-or-disable-is-not-available).