# Private key authentication for NetSuite and other token APIs

> <p>The Expiring Access Token (Client Credentials) credential has an Authentication method setting, and picking Private key JWT lets you authenticate with a signed key instead of a shared secret. NetSuite&rsquo;s other flow forces a reconnect every seven days no matter what; this one doesn&rsquo;t expire. Simple setup takes a token URL, client ID, key file, signing algorithm, key ID and scopes, and an advanced section covers servers that want something non-standard. The key is uploaded from a file and never sent back to the browser, so editing a credential means uploading it again.</p>

Source: https://parabola.io/updates/private-key-authentication-for-netsuite-and-other-token-apis