# NPM tokens (generate, revoke)

**URL:** <https://community.sonatype.com/t/npm-tokens-generate-revoke/948>\
**Category:** Sonatype Nexus Repository\
**Created:** [December 14, 2018, 12:03pm UTC](https://community.sonatype.com/t/npm-tokens-generate-revoke/948 "2018-12-14T12:03:44Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![matej.zerovnik](https://avatars.discourse-cdn.com/v4/letter/m/22d042/32.png) [@matej.zerovnik](https://community.sonatype.com/u/matej.zerovnik)\
**Post date:** [December 14, 2018, 12:03pm UTC](https://community.sonatype.com/t/npm-tokens-generate-revoke/948/1 "2018-12-14T12:03:44Z")

</div>

Hello,

I’m setting up a NPM repos for a few projects and I have a few questions.

Is there a way to get the NPM token from GUI or API or is the only option to login via `npm adduser` and then get the token from `.npmrc`?

How can I see all active NPM tokens?

How can I revoke a NPM token?

Can a single user have multiple tokens? Does Nexus generate unique token for every `npm adduser`?

thanks, Matej

---

<div class="post-metadata">

**Author:** ![nickcook](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/nickcook/32/399_2.png) [@nickcook](https://community.sonatype.com/u/nickcook)\
**Post date:** [December 14, 2018, 12:44pm UTC](https://community.sonatype.com/t/npm-tokens-generate-revoke/948/2 "2018-12-14T12:44:23Z")

</div>

Hey Matej,

Check out the section in the docs around npm security. I think this should give you the answers you’re after:

[https://help.sonatype.com/repomanager3/node-packaged-modules-and-npm-registries#NodePackagedModulesandnpmRegistries-npmSecurity](https://help.sonatype.com/repomanager3/node-packaged-modules-and-npm-registries#NodePackagedModulesandnpmRegistries-npmSecurity)