# Storing Access Token and Refresh Token **URL:** \ **Category:** API and Webhooks\ **Created:** [May 3, 2021, 4:57pm UTC](https://devforum.zoom.us/t/storing-access-token-and-refresh-token/49471 "2021-05-03T16:57:26Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![damitha\_wijeratne](https://avatars.discourse-cdn.com/v4/letter/d/59ef9b/32.png) [@damitha\_wijeratne](https://devforum.zoom.us/u/damitha_wijeratne)\ **Post date:** [May 3, 2021, 4:57pm UTC](https://devforum.zoom.us/t/storing-access-token-and-refresh-token/49471/1 "2021-05-03T16:57:26Z")
As per the documentation [https://marketplace.zoom.us/docs/guides/auth/oauth](https://marketplace.zoom.us/docs/guides/auth/oauth) when we are getting access token and refresh token, we have to store in the database. Is that the standard practice that is recommended to follow? ---
**Author:** ![will.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/will.zoom/32/14417_2.png) [@will.zoom](https://devforum.zoom.us/u/will.zoom)\ **Post date:** [May 4, 2021, 2:41pm UTC](https://devforum.zoom.us/t/storing-access-token-and-refresh-token/49471/2 "2021-05-04T14:41:22Z")
Hi @damitha_wijeratne, Good question—and yes, this would be a standard practice. The reason being, you will need to use the refresh\_token that is returned alongside the access\_token originally, in order to request a new access\_token when it expires. (The purpose of the refresh token is to get a new access\_token **and** refresh\_token pair). Let me know if this helps to clarify. 🙂 Best, Will ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\ **Post date:** [June 4, 2021, 12:41am UTC](https://devforum.zoom.us/t/storing-access-token-and-refresh-token/49471/3 "2021-06-04T00:41:50Z")
Closed on June 4, 2021, 12:41am UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.