What is Refresh Token?

A Refresh Token is a credential given by the identity provider (IdP) when you log in using OAuth 2.0 or OpenID Connect. It lets an app get a new access token without asking the user to log in again. This means users don’t have to re-enter their password every time a session expires. The refresh token quietly keeps their session alive in the background. In identity management, refresh tokens are important for smooth, low-friction logins. They’re especially useful in CIAM and B2B IAM systems where security and long-lived access both matter.