Security
Token Storage
Last updated Jun 23, 2026
Device tokens and API tokens are stored securely on your machine.
CLI tokens live in the Pyvorin configuration directory and are not printed to logs. API tokens are hashed in the Portal database; only the plaintext value is shown once at creation.
If a machine is lost or compromised, revoke its device from the Portal and rotate any API tokens created from that account.