🔁 Rotate your refresh tokens Short-lived session tokens are good for security but bad for UX. Nobody wants to log in every 15 minutes. Refresh tokens solve the UX problem, but they bring their own risk. A stolen refresh token can keep minting new session tokens until it expires. Refresh token rotation shrinks that window: ✅ Every refresh issues a new refresh token and invalidates the old one ✅ The new token keeps the original expiry, so sessions don’t last forever ✅ If an old token shows up again, the auth server revokes the whole token family and forces a fresh login Here’s Haiden covering how it works in under two minutes 👇 (more links in the comments)
Descope
Software Development
Los Altos, California 13,737 followers
⚡ Drag & Drop Customer and Agentic IAM. Add auth, MFA, SSO and access control to your apps, AI agents and MCP servers.
About us
Hi, we're Descope! Our no / low code workflows, SDKs, and APIs help organizations create and customize identity journeys for their customers, partners, AI agents, and MCP servers. Organizations like GoFundMe, Databricks, GoodRx, Navan, and You.com use Descope to reduce user friction, stop account takeover attacks, and get a 360 degree view of their customer and agentic identities.
- Website
-
https://www.descope.com
External link for Descope
- Industry
- Software Development
- Company size
- 51-200 employees
- Headquarters
- Los Altos, California
- Type
- Privately Held
- Founded
- 2022
- Specialties
- Authentication, User Management, Authorization, Passwordless, Developer Tools, User Provisioning, User Onboarding, SAML single sign-on, FIDO Authentication, Magic Links, OTP Authentication, TOTP Authentication, Social Logins, Login Fraud Prevention, Account Takeover Prevention, Credential Stuffing Prevention, Bot Protection, Agentic Identity, and MCP Authorization
Products
![Click here to view Descope]()
Descope
Identity & Access Management (IAM) Software
Drag and drop your auth. Descope helps developers build secure, frictionless authentication and user journeys for any application. Our no-code workflows, SDKs, and APIs abstract away the complexity of authentication so that developers can spend more time building their core product. Designed by security experts, Descope also stops bot attacks on login pages, prevents account takeover, and enables apps to easily add MFA and step-up flows.
Locations
-
Primary
Get directions
101 1st St
Los Altos, California 94022, US
-
Get directions
11 HaAhim MiSlavuta St
Tel Aviv-Yafo, IL
Employees at Descope
Updates
-
Powering your reset away from the hubbub of SF TECH WEEK by a16z It has been a pleasure chatting with you about building and growing companies in the age of AI with the right identity controls in place. Thank you to Unicorner, SimpleClosure, and Deck for an excellent event!
-
-
Descope reposted this
The Descope team is gearing up for a jam-packed October! Whether you're in the Bay Area thinking about agentic identity, in London for the TechLead Conference, or are eager to get ping-pong bragging rights, we have an event or meetup that's right for you. Kudos to Noam Sharir and Aris Bussey for continuing to put Descope on the map!
-
-
Descope has been named "Multifactor Solution of the Year" in the 10th annual CyberSecurity Breakthrough Awards! This is continued validation of our risk-based MFA approach that lets customers apply extra authentication checks by designing conditional user journeys. Repeat users log straight in, while anomalous logins and bad actors get the extra levels of login security they merit. Thank you to Branch Insurance, Navan, U-Haul, and many other organizations that trust Descope as their MFA provider! Read our announcement: https://lnkd.in/es6VZdfw
-
-
Up for some friendly competition away from the TechCrunch main stage? Join Descope and Skyflow during TC Disrupt for an evening of connections, cocktails, and competitive ping pong! This event brings together security, privacy, and identity leaders for an evening away from the usual conference setting and plenty of time to connect with peers tackling the same challenges (like how to deal with a spin serve). RSVP: https://lnkd.in/g56KWKpN
-
-
📢 Bengaluru Demo Day If you're building the next generation of AI-powered enterprise solutions, we want to hear from you! Join Lightspeed India, Descope, Amazon Web Services (AWS) and The Product Folks on 14th Oct at 💡 First Light💡 - a Demo Day designed for early builders seeking honest, constructive feedback on what they're building. If you're pre-revenue or early revenue, this is a space to pressure-test your thinking, sharpen your roadmap, and build meaningful connections within the ecosystem, with the top demos receiving AWS Cloud credits. RSVP: https://lnkd.in/g54yditz
-
-
We're #hiring a new Customer Success Manager in Dallas-Fort Worth Metroplex. Apply today or share this post with your network.
-
Congratulations to Gal Nakash and the Reco team for their $55M fundraise! Organizations looking to map agents in their environment to their owners, context, and risk levels should check out Reco. #Descopers #PoweredByDescope #KeepCalmAndSignOn
Big week at Reco https://lnkd.in/eYjfKqkY Agents are changing how companies work. Securing them is critical without that confidence, companies can’t adopt them at the pace they want. That’s what we’re building Reco to Enable the Agents. But even in a world of agents, it’s all about people ♥️ . The team building, the customers trusting us, and the partners backing us. Tal Shapira Ofer Klein Zoe Hillenmeyer Bob Horn Marina Orenstein Gilad Wisney Merav Keren Kindler David Tirazona oren zeev boldstart ventures Eliot Durbin Ed Sim Angular Ventures Praveen Akkiraju Insight Partners Jerry Dischler Quadrille Capital Amine Baji Forestay Capital Labinot Braimi, CFA
-
Customer Week: You Descope is your customer and agentic identity partner. You can be: ✅ An agile startup looking to add auth in hours ✅ A fast-growing B2B app looking to sell to enterprises ✅ An enterprise looking to modernize homegrown auth ✅ A dissatisfied customer of legacy CIAM ✅ A company looking to augment what you already have ✅ A team building AI agents / MCP servers and seeking identity infra ✅ A business looking to unify auth across multiple apps and IdPs We do auth so you can do you. Read our G2 reviews: https://lnkd.in/gTqeABgi Read our Gartner Peer Insights reviews: https://lnkd.in/dXs8biBf Thank you for following along with Customer Week!
-
So much happened in September that we couldn't fit it into the month! In the latest Auth Thoughts, we cover: 👪 Family Accounts ⚙️ Developer tools to decode JWT and SAML responses 🏓 Privacy, permissions, and ping pong with Skyflow at TechCrunch Disrupt Read on for your monthly roundup from the world of customer and agentic identity 👇 #auththoughts #newsletter #ciam