# Legacy personal tokens

> How v1 personal tokens work and why scoped API keys replaced them.

Source: https://helpdox.fekbd.com/docs/acme-cloud/v1/api-cli/personal-tokens/

In v1, every API call used a personal token with the full permissions of its owner.

## Create a personal token

Go to **Account → Tokens** and click **Generate**. Tokens never expire unless revoked.

## Use the token

Shell

```
curl https://api.acme.example/v1/apps?token=YOUR_TOKEN
```

Warning

Tokens in query strings can end up in logs. v2 API keys use the Authorization header instead.