Yandex Cloud
Search
Contact UsGet started
  • Blog
  • Pricing
  • Documentation
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • ML & AI
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Customer Stories
    • Gateway to Russia
    • Cloud for Startups
    • Education and Science
  • Blog
  • Pricing
  • Documentation
Yandex project
© 2025 Yandex.Cloud LLC
Yandex Identity and Access Management
    • Overview
      • How to choose the correct authentication method
      • IAM token
      • API key
      • Static access key
      • Security Token Service
      • Authorized key
      • OAuth_token
      • ID token
      • Cookie
      • Refresh token
    • Service access to user resources
    • Identity federations
    • Workload identity federations
    • Quotas and limits
  • Secure use of Yandex Cloud
  • Access management
  • Pricing policy
  • Role reference
  • Terraform reference
  • Monitoring metrics
  • Audit Trails events
  • Release notes

In this article:

  • OAuth token format
  • Lifetime
  • Services and utilities that support OAuth token authentication
  1. Concepts
  2. Authentication
  3. OAuth_token

OAuth_token

Written by
Yandex Cloud
Updated at March 31, 2025
  • OAuth token format
  • Lifetime
  • Services and utilities that support OAuth token authentication

In Yandex Cloud, an OAuth token is used to authenticate users with a Yandex account: the user exchanges an OAuth token for an IAM token.

You can get an OAuth token for Yandex Cloud by submitting a request to Yandex OAuth.

OAuth tokens are not available for federated users and service accounts.

OAuth token format

The token always starts with a y, a random number in the 0-3 range, and an underscore (_). Other characters may include:

  • Latin letters.
  • Numbers.
  • Underscores (_) and hyphens (-).

For example, an OAuth token may look like this: y3_Vdheub7w9bIut67GHeL345gfb5GAnd3dZnf08FRbvjeUFvetYiohGvc.

Lifetime

An OAuth token lives 12 months. After that, you need to get a new one and get authenticated again.

Alert

If someone could have learned your OAuth token, revoke it and get a new one by following the instructions.

Services and utilities that support OAuth token authentication

These services and utilities can request an IAM token automatically, so you can only specify an OAuth token for authentication:

  • Yandex Cloud CLI
  • Yandex Container Registry
  • Terraform
  • Packer
  • GitLab CI

See also

  • Learn more about Yandex OAuth here.

Was the article helpful?

Previous
Authorized key
Next
ID token
Yandex project
© 2025 Yandex.Cloud LLC