# Access Token
Access token is a string string that allows an app to make a request on behalf of a particular user. The token contains encrypted data:
- user public key;
- token expiration timestamp.
An access token is required to call the methods that return address for transfer:
You can obtain an access token for your app:
- Via Waves.Exchange app, as described in the Get Token in Waves.Exchange App article.
- Using the POST /oauth2/token API method.
Alongside the access token, you receive a refresh token. When the access token is expired, your app can exchange the refresh token for a new access token using the same API method.
The tokens must only be accessible to your app.