Metacrafter Registry

Datatypes

Azure DevOps personal access token

ID azure_devops_pat

DatatypeNot PIIidentifierDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

Personal access token of Azure DevOps, used instead of a password for Git, the REST API and package feeds. Tokens in the current format have 84 letters and digits with the marker JQQJ99 after the first 52 characters and the signature AZDO at positions 77 to 80. Older 52-character tokens are not covered. The regexp follows the pattern of the Microsoft security-utilities library; Microsoft Purview describes the same key.

Parent datatype
Access token access_token
Categories
Secrets and credentials (passwords, keys, tokens)
Countries
Global (not tied to a country)
Languages
Common to most languages
Microsoft Purview
Azure DevOps personal access token
Quality
75/100 · missing: examples, negative example, translation
Metacrafter rules
no detection rule yet
Supported by tools
Datadog Sensitive Data Scanner, GitGuardian, GitHub secret scanning, Microsoft Purview Data Loss Prevention

Regular expression

^[A-Za-z0-9]{52}JQQJ99[A-Za-z0-9][A-L][A-Za-z0-9]{12}AAAAAZDO[A-Za-z0-9]{4}$

Python re syntax.

Sources

Use this record