Your API token is a secret, similar to a password. Thus, API tokens should be changed periodically to maintain good hygiene, or immediately if you suspect that it has been compromised. 

Visit your profile and click Reset Authentication Token to regenerate a new API token. This will disable any old tokens you've used, so use with care.

Did this answer your question?