This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 78%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EML%3C/text%3E%3C/svg%3E)
Hello,
We have implemented some work recently and although we have set the passwords not to expire, we were wondering are there any instances where the token itself (and therefore passwords within) would get rolled and refreshed?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 79%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3END%3C/text%3E%3C/svg%3E)
Hi @Mike Leigh,
Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.
In Azure Container Registry, tokens and passwords are not automatically refreshed or rolled over by default. However, there are some scenarios where tokens and passwords may be refreshed or updated. If an access token is revoked or expires, the client must request a new token, and the new token will have a new password. If the password for a user account is changed, any access tokens issued to that user will be invalidated, and the user will need to request a new token with the new password.
If you have any further queries, do let us know.
@Nikhil Duserla So, just for clarity; there are situations where the token (and therefore password within) may be reset by Microsoft? The scenarios you mentioned seem to be client actions but I was more concerned about scenarios where Microsoft may need to roll these tokens
@Nikhil Duserla Just to clarify, does this mean there are scenarios where Microsoft may be required to refresh the token and/or passwords within? I'm less worried about the client regenerating a token or modifying, just wanted to clarify if there was a scenario that Microsoft would need to roll these. Apologies for duplication, there seemed to be a transient issue with adding comments
@Nikhil Duserla excellent, we were just concerned there may be a situation Microsoft could refresh these i.e. security need. That's great, thank you for confirming.
Hi @Mike Leigh
I’d like to clarify that Microsoft Azure Container Registry (ACR) does not automatically refresh tokens. This behavior is intentional to maintain control and security over the token lifecycle.
Hi @Mike Leigh,
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.