It seems like your browser didn't download the required fonts. Please revise your security settings and try again.


As of March 1, 2022, the legacy Barracuda Essentials Security, Compliance, and Complete editions are no longer available for purchase. Only existing customers can renew or add users to these plans.

Following October 30, 2022, the documentation and trainings will no longer be updated and will contain outdated information.

For more information on the latest Email Protection plans, see Barracuda Email Protection.

To update your bookmarks, see the following for the latest documentation and trainings:

Note that MSP customers should continue to follow Barracuda Essentials for MSPs.

Registering your Application in the Barracuda Token Service

  • Last updated on

This article refers to the steps to register your application using the Barracuda Token Service to obtain a Client ID and Client Secret. 

The Client ID is a unique identifier for your application, generated by the system when you register your application and cannot be modified. The Client Secret is used to sign and validate access tokens for authentication and to gain access to API endpoints.

You will use the Client ID and Client Secret to create an access token. The Client Secret does not expire. However, you can reset the Client Secret in the Barracuda Token Service to generate a new password.

Add a New Application

Log into the Barracuda Token Service at If you are currently not logged into Barracuda Cloud Control (BCC), you will need to log in using your BCC user credentials before you are redirected to the Barracuda Token Service. 

Register Your New Application

  1. Click the ADD APPLICATION button on the top right.
  2. On the Add Application page, under the Application Details section, fill in the Application name. Under the Application Scope section, select the type of access you want for each available scope. 
  3. Click ADD APPLICATION to register your application.

    You are now redirected to the Applications Details page for that application. 

Obtain your Client ID and Client Secret

On the Application Details page, you can copy your Client ID and Client Secret to the clipboard. The Client Secret will only be available to view or copy for 15 minutes. However, you can reset it at any time.

For security purposes, the Client Secret must be kept confidential. If anyone can access your Client Secret, they can issue tokens and access resources they should not access.

Edit or Delete your Application

Log into the Barracuda Token Service at to access your applications. 

To edit or delete your application, click EDIT next to the application you want to change. You can do the following:

  • Under Application Details,
    • Change the Application name.
    • Select DELETE APPLICATION to delete the application.
    • Select RESET CLIENT SECRET to reset the Client Secret. 
  • Under Application Scope, change the type of access.

Click SAVE APPLICATION to save your changes.