---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Cleaning up token expiry

# Cleaning up token expiry {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Details about how to clean up token expiry by using different system properties.

After the API Key or HMAC secret expires, the details are retained for 7 days. A scheduled job `Clean expired Token Auth Credentials` deletes the expired API keys or HMAC secrets after that. You can configure this behavior
and control the deletion using the following properties:

* com.snc.platform.security.token.auth.cleanup: Use this property if you want to delete expired API keys and HMAC tokens. By default `true`.
* com.snc.platfrom.security.token.auth.days.expired.api_key.is.kept: Set the value based on your requirement to determine the number of days you want to keep the expired <kbd class="ph userinput">API</kbd> token in the system. By default 7.
* com.snc.platfrom.security.token.auth.days.expired.hmac_key.is.kept: Set the value based on your requirement to determine the number of days you want to keep the expired <kbd class="ph userinput">HMAC</kbd> token in the system. By default 7.

{#token-expiry-api-and-hmac__ul_tkx_3dx_5bc}

To navigate to the token expiry property, enter <kbd class="ph userinput">sys_properties.list</kbd> in the navigation bar and then search for the following properties. Change the expiry based on your requirement.