---
schema_version: "1"
id: ee301b164efb389a06887e18a0d528a26cd2fd4b0640675779f0e469ce366786
title: Update Your Mobile Publisher App for Stronger Mobile Security
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/264-0-0/rn_mobile_rtr_ec_apps_support.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_mobile_rtr_ec_apps_support.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 1b8274cbd67a1dfa60a31983bc3fc856488e1cef005ffcb4715ef33af5c45f2a
description: To defend against stolen-credential and token-replay attacks, Salesforce is enabling Refresh Token Rotation (RTR). Because refresh tokens keep users signed in without re-entering passwords, updating your app for RTR support ensures their access remains secure and uninterrupted.
products:
  - Cross Cloud
release: "264"
---
# Update Your Mobile Publisher App for Stronger Mobile Security

To defend against stolen-credential and token-replay attacks, Salesforce is enabling Refresh Token Rotation (RTR). Because refresh tokens keep users signed in without re-entering passwords, updating your app for RTR support ensures their access remains secure and uninterrupted.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-release-notes-salesforce_release_notes-264-0-0-production-enus/550ba85b-db1a-4608-9cd4-9a65ec96e1fa/images/icon_note.png)

Note Your branded app was built on a version that predates RTR support. When Salesforce enables RTR for your app, users still on the older build will be signed out and unable to log back in until you publish an updated version. Because you control which version of your branded app is live in the app stores, this update is yours to make.

**Where:** This change applies to [LWR and Aura Experience Cloud](https://help.salesforce.com/s/articleView?id=experience.exp_cloud_basics_glossary.htm&type=5&language=en_US) sites accessed through Mobile Publisher apps in Enterprise, Performance, Unlimited, and Developer editions.

**When:** This change is available starting October 21, 2026.

**How:** Update your app to the latest version after October 21, 2026, so your users can remain logged in to your app.