---
schema_version: "1"
id: c42435dbd4e99a93d0db50671af9357cb1481c36e2b2229203e2332e077b63f1
title: Update the Field Service Mobile App to Protect Against Stolen Tokens
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/264-0-0/rn_fieldservice_264_mobile_refresh_token.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_fieldservice_264_mobile_refresh_token.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: a8d736fcd16be943ab3a3fbfdf086215e78a1c79a570c86e71bb09c3e65c1e81
description: Refresh Token Rotation (RTR) protects your Salesforce data by issuing a new refresh token every time the Field Service mobile app authenticates. This feature closes a gap where a threat actor tries to use a stolen token to access your org and your data. With RTR, a stolen token stops working almost immediately. This works in tandem with the previously announced refresh token idle security feature.
products:
  - Cross Cloud
release: "264"
---
# Update the Field Service Mobile App to Protect Against Stolen Tokens

Refresh Token Rotation (RTR) protects your Salesforce data by issuing a new refresh token every time the Field Service mobile app authenticates. This feature closes a gap where a threat actor tries to use a stolen token to access your org and your data. With RTR, a stolen token stops working almost immediately. This works in tandem with the previously announced refresh token idle security feature.

**Where:** This change applies to the Field Service mobile app for Android and iOS.

**How:** We include RTR automatically in the Field Service mobile app v264.1 and later—no setup is required. Your team must update their devices from the Apple App Store or Google Play Store to v264.1 or later before January 18, 2027. After this date, devices running older versions experience periodic forced logouts, and mobile workers lose any unsynced work on the device when logout occurs.

#### See Also

- [_Salesforce Release Notes_: Refresh Token Idle TTL Is Limited to 30 Days](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_refresh_token_ttl.htm&release=264&type=5&language=en_US)
- [Download for iOS: Apple App Store](https://apps.apple.com/us/app/salesforce-field-service/id1163307568)
- [Download for Android: Google Play Store](https://play.google.com/store/apps/details?id=com.salesforce.fieldservice.app&hl=en_US)