A Pause Button for Service Tokens! Cloudflare Access's New Feature

Hey, it's me, Shiichan! Here's a second Cloudflare Access update to go along with the grace-period one I just told you about.

Cloudflare Changelog developers.cloudflare.com

What was announced?

The Cloudflare Changelog announced that Access administrators can now temporarily turn off a service token. You no longer have to delete a token just to stop it from authenticating.

The story so far

Before this, deleting was the only way to stop a service token. But deleting it wiped out its configuration too, so if you ever wanted to reuse the same setup, you had to rebuild it from scratch.

What changes

With the new on/off toggle, disabling a token keeps its configuration intact, so you can turn it back on whenever you need it. A disabled token simply can't authenticate anymore, and if it had a previous secret sitting in an active rotation grace period, that gets stopped too.

Dive Deep

This is useful in a couple of situations:

• Quickly containing a suspected credential exposure without losing the token's setup
• Pausing an automated service temporarily while keeping its configuration ready to go

Both are cases where you might want to flip things back on later, so being able to pause instead of delete is a small but genuinely useful addition.

Wrap-up

• Cloudflare Access service tokens can now be temporarily disabled instead of deleted.
• Configuration stays intact, so re-enabling later is simple.
• Turning a token off also stops any previous secret sitting in an active rotation grace period.
• A handy tool for Access admins responding to a suspected credential leak or pausing an automated service.