---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Cleaning up token Expiry

# Cleaning up token Expiry {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Details about how to clean up token expiry by using different system properties.

Once the API Key or HMAC secret expires, the details is retained for 7 days. A scheduled job `Clean expired Token Auth Credentials` deletes the expired API Keys or HMAC Secrets after that. You can configure this behavior
and control the deletion using the following properties:

* com.snc.platform.security.token.auth.cleanup: Use this property if you want to delete expired API Keys and HMAC tokens. By default `true`.
* com.snc.platfrom.security.token.auth.days.expired.api_key.is.kept: Set the value based on your requirement to determine the number of days you want the keep the expired <kbd class="ph userinput">API</kbd> token in the system. By default 7.
* com.snc.platfrom.security.token.auth.days.expired.hmac_key.is.kept: Set the value based on your requirement to determine the number of days you want the keep the expired <kbd class="ph userinput">HMAC</kbd> token in the system. By default 7.

{#token-expiry-api-and-hmac__ul_tkx_3dx_5bc}

To navigate to the token expiry property, enter <kbd class="ph userinput">sys_properties.list</kbd> in the navigation bar and then search for the following properties. Change the expiry based on your requirement.