---
slug: zugangsdaten-hinterlegen
title: "How do I store an advertising platform’s access token?"
category: berichte
locale: en
updated: 2026-10-12
keywords: ["credentials","access token","encrypted","secret","storage"]
questions: ["Where do I enter my credentials for Meta, Google Ads, TikTok, LinkedIn or Microsoft Advertising?","Enter credentials","Store access token","Where do you keep my token?","Change token","Delete credentials"]
url: https://bench.metrunio.com/en/help/zugangsdaten-hinterlegen
---

# How do I store an advertising platform’s access token?

**Where do I enter my credentials for Meta, Google Ads, TikTok, LinkedIn or Microsoft Advertising?**

In the portal under “Data connections”, in the “Return conversions” and “Receive costs” sections. You enter the token yourself and can replace or remove it at any time; Metrunio encrypts it and from then on shows only the last four characters. With Google Ads and Meta you do not need one: there you sign in at the platform.

1. Create an access token in your ad account with the rights the purpose needs: read for cost sync, write for pushback.
2. Under “Data connections”, open the platform’s connection in the “Receive costs” or “Return conversions” section, or use “Edit” on an existing one.
3. Enter the token in the “Access token” field and save.
4. A new connection starts in test mode. For cost sync, the first fetch shows whether the access works, without writing anything. For pushback, test mode sends test events or nothing at all, depending on the platform; the platform’s card says which.

## What happens to the token

| Question | Answer |
| --- | --- |
| Method | AES-256-GCM, encrypted in the database |
| Visible | the last four characters, nothing else |
| Who can read it | the application at runtime, neither an interface nor an API |
| Another tenant | cannot decrypt it, not even through a mistake |
| Another purpose | it is stored per connection and purpose; the cost sync’s stored copy cannot be moved over to pushback |
| Log | every change is recorded in the change log: the fact, never the value |

> **Note:** An empty token field means “leave unchanged”, not “delete”. Otherwise every other change to the same setting would take the credentials with it. It is removed only explicitly, via “Disconnect”.

## Rights the token needs

- Cost sync: read access to the ad account’s reports only.
- Conversion pushback: write access to the platform’s conversion interface.
- Do not grant more than needed. A token can move budgets and switch campaigns off.

> **Caution:** Metrunio never asks for credentials by email or in chat, and never creates accounts on the platforms. Anyone who asks you for them is not Metrunio.

## Also asked

- Enter credentials
- Store access token
- Where do you keep my token?
- Change token
- Delete credentials

## Related

- https://bench.metrunio.com/en/help/kostenabgleich-plattformen
- https://bench.metrunio.com/en/help/conversion-rueckgabe
- https://bench.metrunio.com/en/help/sicherheit-architektur
- https://bench.metrunio.com/en/help/zugangsdaten-werbeplattformen