# What is the maximum number of characters a Square API Access Token for production for an account can be?

**URL:** <https://developer.squareup.com/forums/t/what-is-the-maximum-number-of-characters-a-square-api-access-token-for-production-for-an-account-can-be/1655>\
**Category:** Questions\
**Tags:** oauth-api\
**Created:** [January 22, 2021, 2:54am UTC](https://developer.squareup.com/forums/t/what-is-the-maximum-number-of-characters-a-square-api-access-token-for-production-for-an-account-can-be/1655 "2021-01-22T02:54:29Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![shardul-shah](https://avatars.discourse-cdn.com/v4/letter/s/a87d85/32.png) [@shardul-shah](https://developer.squareup.com/forums/u/shardul-shah)\
**Post date:** [January 22, 2021, 2:54am UTC](https://developer.squareup.com/forums/t/what-is-the-maximum-number-of-characters-a-square-api-access-token-for-production-for-an-account-can-be/1655/1 "2021-01-22T02:54:29Z")

</div>

What is the maximum number of characters a Square API Access Token for production for an account can be? The minimum would be nice too, but doesn’t matter as much of course.

Sadly, I cannot find any information on this page: [https://developer.squareup.com/docs/build-basics/access-tokens](https://developer.squareup.com/docs/build-basics/access-tokens)

Thanks,

Shardul

---

<div class="post-metadata">

**Author:** ![sjosey](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/sjosey/32/40_2.png) [@sjosey](https://developer.squareup.com/forums/u/sjosey)\
**Post date:** [January 22, 2021, 4:44pm UTC](https://developer.squareup.com/forums/t/what-is-the-maximum-number-of-characters-a-square-api-access-token-for-production-for-an-account-can-be/1655/2 "2021-01-22T16:44:52Z")

</div>

This info is in the tech ref, currently. You can see it on `ObtainToken`’s page:

> A valid OAuth access token. OAuth access tokens are 64 bytes long.

> **[POST /oauth2/token - Square API Reference](https://developer.squareup.com/reference/square/oauth-api/obtain-token#response__property-access_token)**
>
> Returns an OAuth access token and a refresh token unless the 
> \`short\_lived\` parameter is set to \`true\`, in which case the endpoint 
> returns only an access token.

Please let me know if you have additional questions or concerns!

---

<div class="post-metadata">

**Author:** ![shardul-shah](https://avatars.discourse-cdn.com/v4/letter/s/a87d85/32.png) [@shardul-shah](https://developer.squareup.com/forums/u/shardul-shah)\
**Post date:** [January 22, 2021, 9:44pm UTC](https://developer.squareup.com/forums/t/what-is-the-maximum-number-of-characters-a-square-api-access-token-for-production-for-an-account-can-be/1655/3 "2021-01-22T21:44:55Z")

</div>

Thanks a lot Stephen!