OAuth token
OAuth token authentication is no longer supported
Starting June 1, 2026, the authentication service no longer accepts new OAuth tokens received via YandexID. Tokens issued before June 1, 2026 will remain valid until their expiration date.
In Yandex Cloud, an OAuth token is used to authenticate users with a Yandex account: the user exchanges an OAuth token for an IAM token.
You can get an OAuth token for Yandex Cloud by submitting a request to Yandex OAuth.
OAuth tokens are not available for federated users and service accounts.
OAuth token format
The token always starts with a y, a random number in the 0-3 range, and an underscore (_). Other characters may include:
- Latin letters.
- Numbers.
- Underscores (
_) and hyphens (-).
For example, an OAuth token may look like this: y3_Vdheub7w9bIut67GHeL345gfb5GAnd3dZnf08FRbvjeUFvetYiohGvc.
Lifetime
An OAuth token lives 12 months. After that, you need to get a new one and get authenticated again.
Alert
If someone could have learned your OAuth token, revoke it and get a new one by following the instructions.
Services and utilities that support OAuth token authentication
These services and utilities can request an IAM token automatically, so you can only specify an OAuth token for authentication:
Use cases
Useful links
- Learn more about Yandex OAuth here.