# Vercel Blob now supports OIDC authentication

By Steven Van · 2026-06-01

Vercel Blob switches to short-lived, auto-rotating OIDC tokens by default, replacing the long-lived BLOB\_READ\_WRITE\_TOKEN.

Vercel Blob now authenticates with OIDC instead of a long-lived token, and it's the default for new projects connecting a store. Vercel issues a short-lived OpenID Connect token that rotates automatically, so functions running on [Vercel](<https://creatorstoolbox.com/tools/vercel>) no longer need a BLOB\_READ\_WRITE\_TOKEN to read or write.

Existing stores can switch over by updating to the latest @vercel/blob, then choosing **Upgrade to OIDC** from the project's context menu on the Projects tab under the Blob store. The Vercel CLI picks up the same environment variables once updated, so a terminal or an agent can read and write to a private store without a long-lived token. Details are in the [announcement](<https://vercel.com/changelog/vercel-blob-now-supports-oidc-authentication>).

[![](<https://vercel.com/api/docs-og?title=%40vercel%2Fblob&format=docs&sig=890111ceb40db10b89f69dc9995b5a9a4e5437f551d9228186765b47b664fb22&category=Ship%20and%20scale&subcategory=Storage&subcategory2=Blob>)](<https://vercel.com/docs/vercel-blob/using-blob-sdk#authentication>)

![Vercel](<https://www.google.com/s2/favicons?domain=vercel.com&sz=128>)

Vercel

The platform for frontend developers — deploy, preview, and scale web apps and AI agents with zero config.

[View Vercel →](<https://creatorstoolbox.com/tools/vercel>)

Sources

[Original source](<https://vercel.com/docs/vercel-blob/using-blob-sdk#authentication>)

[Read Vercel Blob now supports OIDC authentication on Creators Toolbox](<https://creatorstoolbox.com/blog/vercel-vercel-blob-now-supports-oidc-authentication>)

---
Canonical source: https://creatorstoolbox.com/blog/vercel-vercel-blob-now-supports-oidc-authentication