---
schema_version: "1"
id: 63dee6b0bb640f19aed8cae139c9e906cf58d9011785ba15fe8966802b60d8a6
title: Update Your Branded App for Stronger Mobile Security
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/264-0-0/rn_mobile_rtr_support.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_mobile_rtr_support.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 19d23dc16a92fda3d65d84b59deb3509df471eb1fceeeaf952c47adf35f1ea70
description: To defend against stolen-credential and token-replay attacks, Salesforce is enabling Refresh Token Rotation (RTR). Because refresh tokens keep users signed in without re-entering passwords, updating your app for RTR support ensures their access remains secure and uninterrupted.
products:
  - Cross Cloud
release: "264"
---
# Update Your Branded App for Stronger Mobile Security

To defend against stolen-credential and token-replay attacks, Salesforce is enabling Refresh Token Rotation (RTR). Because refresh tokens keep users signed in without re-entering passwords, updating your app for RTR support ensures their access remains secure and uninterrupted.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-release-notes-salesforce_release_notes-264-0-0-production-enus/550ba85b-db1a-4608-9cd4-9a65ec96e1fa/images/icon_note.png)

Note Your branded app was built on a version that predates RTR support. When Salesforce enables RTR for your app, users still on the older build will be signed out and unable to log back in until you publish an updated version. Because you control which version of your branded app is live in the app stores, this update is yours to make.

**Where:** This change applies to the Salesforce mobile app for iOS and Android.

**When:** This change is available starting October 21, 2026.

**How:** Update your app to the latest version after October 21, 2026, so your users can remain logged in to your app.