Skip to content

How long does the master token last? #491

Answered by mxrch
thejoeosborne asked this question in Q&A
Discussion options

You must be logged in to vote

Hey !
From the article where I learnt about it : https://ethanblake4.medium.com/how-i-stole-the-data-in-millions-of-peoples-google-accounts-aa1b72dcc075

The master token never expires, unless the user changes their password or two-factor settings. It’s not subject to any security checks based on location, IP, or activity, as best as I can tell. It never results an email or notification being sent to the user.

Replies: 1 comment 1 reply

Comment options

You must be logged in to vote
1 reply
@thejoeosborne
Comment options

Answer selected by thejoeosborne
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants