> ## Documentation Index
> Fetch the complete documentation index at: https://docs.psntools.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get your NPSSO token

> What the NPSSO token is, what data it can access, the risks, and how to get it safely.

<Warning>
  **Need help or have questions?** Join our Discord server and ask in the support channels: [PSNTools - Discord](https://discord.gg/Mz3cQjq9qw).

  This guide is community-maintained. If you're unsure about any step, it's safer to ask first.
</Warning>

The NPSSO token lets you access private PlayStation APIs like [PSNAWP](https://github.com/Tustin/psnawp). These APIs can be used to:

* View user profile info
* Check friends list and online status
* Get trophy data
* Access game metadata
* Track PSN activity
* And more

## Get your NPSSO token

<Steps>
  <Step title="Log in to PlayStation.com">
    Log in to [playstation.com](https://www.playstation.com/) using your browser. Log out and then log back in to refresh the token.
  </Step>

  <Step title="Extract the token">
    Go to [https://ca.account.sony.com/api/v1/ssocookie](https://ca.account.sony.com/api/v1/ssocookie). You'll see:

    ```json theme={null}
    { "npsso": "your_64_character_token_here" }
    ```

    Copy the token. It should be valid for 60 days.
  </Step>
</Steps>

## What NPSSO can access

The NPSSO token gives limited access to your PlayStation account data. According to the [PSNTools privacy policy](https://www.psntools.com/outreach/privacy-policy), here's what it can and cannot access:

| Data point                       | Accessed |
| -------------------------------- | -------- |
| Account / login email            | Yes      |
| Account / login password         | No       |
| Personal profile picture         | Yes      |
| Real name                        | Yes      |
| Account devices                  | Yes      |
| Credit cards / payment details   | No       |
| All transaction history          | Yes      |
| 2-step verification phone number | No       |
| Exact date of birth              | Yes      |
| Verification status              | Yes      |
| Cart items                       | Yes      |

This clarifies what level of privacy is maintained when using your NPSSO with third-party API tools.

## Frequently asked questions

<AccordionGroup>
  <Accordion title="Are there any risks if someone gains access to my NPSSO?">
    Yes. If someone gets your NPSSO token, they can extract sensitive account data — transaction history, real name, profile picture, date of birth, and other details tied to your PSN identity.

    Even though they can't directly log in or change your password, they **can log your transaction IDs**. If they contact Sony support pretending to be you and provide those transaction details, they may be able to take over your account through social engineering.

    <Warning>
      Never paste your NPSSO on untrusted websites. Treat it like a password. Only use it with safe, known tools — ideally open-source ones you can inspect.
    </Warning>
  </Accordion>

  <Accordion title="Can I use NPSSO with official PlayStation services?">
    No. NPSSO is only used with **unofficial, reverse-engineered APIs** like:

    * [`psn-api`](https://github.com/Tustin/psn-api)
    * [`psnawp`](https://github.com/Tustin/psnawp)
    * Other tools that simulate PlayStation's internal requests

    You **cannot** use NPSSO with Sony's official API endpoints or developer portals, since Sony has not made any public-facing API that supports it. NPSSO is meant for internal cookie-based session auth; these tools just repurpose it for personal use.
  </Accordion>

  <Accordion title="Is there an easier way to get my NPSSO without copying it manually every time?">
    Yes. You can simplify the process with a **browser extension** that:

    * Detects when you're signed into `playstation.com`, or signs you in
    * Extracts the NPSSO cookie from your current session
    * Displays or copies the token instantly

    This is much faster than manually visiting the NPSSO URL each time.

    <Warning>
      **Only use trusted tools.** Never use apps or websites that ask for your NPSSO unless they are open-source or verifiable (for example, hosted on GitHub). Avoid `.exe` files or applications that offer cosmetic changes like custom avatars if they require your `NPSSO` or your `pdccws_P`.
    </Warning>
  </Accordion>
</AccordionGroup>

## Safe open-source tools

[PSNToolBot](https://github.com/hzhreal/PSNToolBot) — a Discord bot used mainly to add PlayStation 3 avatars to a shopping cart and obtain a PlayStation account ID from a username. Made by [@hzhreal](https://github.com/hzhreal).

More safe tools will be added soon.


## Related topics

- [PSNTools Documentation](/index.md)
- [Create a PSNTools account](/getting-started/create-account.md)
- [Profile Modder](/profile-tools/profile-modder.md)
- [Profile Cloner](/profile-tools/profile-cloner.md)
- [Change your password](/getting-started/change-password.md)