# Access Token
Access token is a string that allows an app to make a request on behalf of a particular user. The token contains encrypted data:
- user public key;
- token expiration timestamp.
An access token is required to call the following methods:
- GET /deposit/addresses/{currency}
- GET /deposit/addresses/{currency}/{platform}
- GET /withdraw/addresses/{currency}/{address}
- GET /withdraw/addresses/{currency}/{address}/{platform}
- GET /movements
- GET /movements/{id}
You can obtain an access token for your app:
- Via WX Network app, as described in the Get Token in WX Network App article.
- Using the POST /oauth2/token API method.
Alongside the access token, you receive a refresh token. When the access token is expired, your app can exchange the refresh token for a new access token using the same API method.
The tokens must only be accessible to your app.