diff --git a/docker-hub/access-tokens.md b/docker-hub/access-tokens.md index 210706df6e..1f04593c5e 100644 --- a/docker-hub/access-tokens.md +++ b/docker-hub/access-tokens.md @@ -4,8 +4,8 @@ description: Learn how to create and manage your personal Docker Hub access toke keywords: docker hub, hub, security, PAT, personal access token --- -Docker Hub lets you create personal access tokens as alternatives to your password. -You can use tokens to access Hub images from the Docker CLI. +Docker Hub lets you create personal access tokens as alternatives to your password. You can use tokens to +access Hub images from the Docker CLI. Using personal access tokens provides some advantages over a password: @@ -13,8 +13,12 @@ Using personal access tokens provides some advantages over a password: it if you find any suspicious activity. * When using an access token, you can't perform any admin activity on the account, including changing the password. It protects your account if your computer is compromised. + +Docker provides a [Docker Hub CLI](https://github.com/docker/hub-tool#readme){: target="_blank" rel="noopener" class="_"} +tool (currently experimental) and an API that allows you to interact with Docker Hub. Browse +through the [Docker Hub API](/docker-hub/api/latest/){: target="_blank" rel="noopener" class="_"} documentation to explore the supported endpoints. ->**Important** +> **Important** > > Treat access tokens like your password and keep them secret. Store your > tokens securely (for example, in a credential manager). @@ -24,7 +28,7 @@ Access tokens are valuable for building integrations, as you can issue multiple tokens – one for each integration – and revoke them at any time. - >**Note** + > **Note** > > If you have [two-factor authentication (2FA)](2fa/index.md) enabled on > your account, you must create at least one personal access token. Otherwise, @@ -47,15 +51,21 @@ You can create as many tokens as you need. ![PAT Menu](images/hub-create-token.png){:width="700px"} +The access permissions are scopes that set restrictions in your +repositories. For example, for Read & Write permissions, an automation +pipeline can build an image and then push it to a repository. However, it +can not delete the repository. + 5. The table below lists the tokens available in each subscription: + | Feature | Personal | Pro | Team | Business | | --------------------- | ---- | ----- | ----- |----- | - | Personal Access Tokens (read, write, delete scope only)* | x | x | x | x | - | Scoped Personal Access Tokens | | x | x | x | - | Unlimited Personal Access Tokens | | | x | x | + | Personal Access Tokens (read, write, delete scope only)* |![yes](/images/green-check.svg)| ![yes](/images/green-check.svg) |![yes](/images/green-check.svg) |![yes](/images/green-check.svg)| + | Scoped Personal Access Tokens | |![yes](/images/green-check.svg)| ![yes](/images/green-check.svg)|![yes](/images/green-check.svg)| + | Unlimited Personal Access Tokens | | | ![yes](/images/green-check.svg)|![yes](/images/green-check.svg)| - >*You can create 1 access token as part of the Docker Personal tier, 5 tokens as part of Docker Pro, and Unlimited tokens as part of Docker Team and Business tier. + *You can create 1 access token as part of the Docker Personal subscription, 5 tokens as part of Docker Pro, and Unlimited tokens as part of Docker Team and Business subscriptions. For more information, see [Docker Pricing](https://www.docker.com/pricing?utm_source=docker&utm_medium=webreferral&utm_campaign=docs_driven_upgrade){: target="_blank" rel="noopener" class="_"}. 6. Copy the token that appears on the screen and save it. You will not be able @@ -95,10 +105,3 @@ You can rename, activate, deactivate, or delete a token as needed. ![Modify Token](images/hub-edit-token.png){:width="700px"} 3. After modifying the token, click the **Save** button to save your changes. - -> **Tip: Docker Hub CLI and API** -> -> Docker provides a [Docker Hub CLI](https://github.com/docker/hub-tool#readme){: target="_blank" rel="noopener" class="_"} -> tool (currently experimental) and an API that allows you to interact with Docker -> Hub. Browse through the [Docker Hub API](/docker-hub/api/latest/){: target="_blank" rel="noopener" class="_"} -> documentation to explore the supported endpoints. diff --git a/docker-hub/images/hub-copy-token.png b/docker-hub/images/hub-copy-token.png index fc28270a30..8d1f76e856 100644 Binary files a/docker-hub/images/hub-copy-token.png and b/docker-hub/images/hub-copy-token.png differ diff --git a/docker-hub/images/hub-create-token.png b/docker-hub/images/hub-create-token.png index 73daa0fca1..8b3390fcb6 100644 Binary files a/docker-hub/images/hub-create-token.png and b/docker-hub/images/hub-create-token.png differ diff --git a/docker-hub/images/hub-delete-edit-token.png b/docker-hub/images/hub-delete-edit-token.png index 24b5af2535..27b04e3b51 100644 Binary files a/docker-hub/images/hub-delete-edit-token.png and b/docker-hub/images/hub-delete-edit-token.png differ diff --git a/docker-hub/images/hub-edit-token.png b/docker-hub/images/hub-edit-token.png index 71fe968f06..cfa75efaa8 100644 Binary files a/docker-hub/images/hub-edit-token.png and b/docker-hub/images/hub-edit-token.png differ