diff --git a/packages/developer-portal/src/components/apps/new/__tests__/__snapshots__/helper-content.test.tsx.snap b/packages/developer-portal/src/components/apps/new/__tests__/__snapshots__/helper-content.test.tsx.snap
index 8a08694727..22235f6992 100644
--- a/packages/developer-portal/src/components/apps/new/__tests__/__snapshots__/helper-content.test.tsx.snap
+++ b/packages/developer-portal/src/components/apps/new/__tests__/__snapshots__/helper-content.test.tsx.snap
@@ -113,6 +113,16 @@ exports[`HelperContent should match a snapshot 1`] = `
                   please click here.
                 </a>
               </mock-styled.p>
+              <mock-styled.p
+                classname="el-text-base el-has-grey-text"
+              >
+                From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+                 
+                <a>
+                  please click here.
+                </a>
+                 Apps registered prior to this date are unaffected by this change.
+              </mock-styled.p>
             </div>
           </div>
         </div>
@@ -136,6 +146,19 @@ exports[`HelperContent should match a snapshot 1`] = `
           >
             Your application can be authenticated against our Platform either on the client-side or server-side. If you choose client-side authentication at the next step but later wish to upgrade to a full AgencyCloud integration in the future, you can do this. However, it is important to note, server-side integrations cannot be launched from within AgencyCloud.
           </mock-styled.p>
+          <mock-styled.p
+            classname="el-text-base el-has-grey-text"
+          >
+            From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+             
+            <a
+              role="link"
+            >
+              please click here.
+            </a>
+             
+            Apps registered prior to this date are unaffected by this change.
+          </mock-styled.p>
         </div>
         <div
           class="mock-css.
@@ -257,6 +280,19 @@ exports[`HelperContent should match a snapshot 1`] = `
             </a>
             to investigate which data sets and permissions you will need before getting started.
           </mock-styled.p>
+          <mock-styled.p
+            classname="el-text-base el-has-grey-text"
+          >
+            From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+             
+            <a
+              role="link"
+            >
+              please click here.
+            </a>
+             
+            Apps registered prior to this date are unaffected by this change.
+          </mock-styled.p>
         </div>
         <div
           class="mock-css.
@@ -287,6 +323,19 @@ exports[`HelperContent should match a snapshot 1`] = `
               visit here
             </a>
           </mock-styled.p>
+          <mock-styled.p
+            classname="el-text-base el-has-grey-text"
+          >
+            From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+             
+            <a
+              role="link"
+            >
+              please click here.
+            </a>
+             
+            Apps registered prior to this date are unaffected by this change.
+          </mock-styled.p>
         </div>
         <div
           class="mock-css.
@@ -328,6 +377,19 @@ exports[`HelperContent should match a snapshot 1`] = `
             </a>
              for quick start client-side development.
           </mock-styled.p>
+          <mock-styled.p
+            classname="el-text-base el-has-grey-text"
+          >
+            From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+             
+            <a
+              role="link"
+            >
+              please click here.
+            </a>
+             
+            Apps registered prior to this date are unaffected by this change.
+          </mock-styled.p>
         </div>
         <div
           class="mock-css.
@@ -537,6 +599,16 @@ exports[`HelperContent should match a snapshot 1`] = `
                 please click here.
               </a>
             </mock-styled.p>
+            <mock-styled.p
+              classname="el-text-base el-has-grey-text"
+            >
+              From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+               
+              <a>
+                please click here.
+              </a>
+               Apps registered prior to this date are unaffected by this change.
+            </mock-styled.p>
           </div>
         </div>
       </div>
@@ -560,6 +632,19 @@ exports[`HelperContent should match a snapshot 1`] = `
         >
           Your application can be authenticated against our Platform either on the client-side or server-side. If you choose client-side authentication at the next step but later wish to upgrade to a full AgencyCloud integration in the future, you can do this. However, it is important to note, server-side integrations cannot be launched from within AgencyCloud.
         </mock-styled.p>
+        <mock-styled.p
+          classname="el-text-base el-has-grey-text"
+        >
+          From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+           
+          <a
+            role="link"
+          >
+            please click here.
+          </a>
+           
+          Apps registered prior to this date are unaffected by this change.
+        </mock-styled.p>
       </div>
       <div
         class="mock-css.
@@ -681,6 +766,19 @@ exports[`HelperContent should match a snapshot 1`] = `
           </a>
           to investigate which data sets and permissions you will need before getting started.
         </mock-styled.p>
+        <mock-styled.p
+          classname="el-text-base el-has-grey-text"
+        >
+          From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+           
+          <a
+            role="link"
+          >
+            please click here.
+          </a>
+           
+          Apps registered prior to this date are unaffected by this change.
+        </mock-styled.p>
       </div>
       <div
         class="mock-css.
@@ -711,6 +809,19 @@ exports[`HelperContent should match a snapshot 1`] = `
             visit here
           </a>
         </mock-styled.p>
+        <mock-styled.p
+          classname="el-text-base el-has-grey-text"
+        >
+          From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+           
+          <a
+            role="link"
+          >
+            please click here.
+          </a>
+           
+          Apps registered prior to this date are unaffected by this change.
+        </mock-styled.p>
       </div>
       <div
         class="mock-css.
@@ -752,6 +863,19 @@ exports[`HelperContent should match a snapshot 1`] = `
           </a>
            for quick start client-side development.
         </mock-styled.p>
+        <mock-styled.p
+          classname="el-text-base el-has-grey-text"
+        >
+          From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+           
+          <a
+            role="link"
+          >
+            please click here.
+          </a>
+           
+          Apps registered prior to this date are unaffected by this change.
+        </mock-styled.p>
       </div>
       <div
         class="mock-css.
diff --git a/packages/developer-portal/src/components/apps/new/__tests__/__snapshots__/index.test.tsx.snap b/packages/developer-portal/src/components/apps/new/__tests__/__snapshots__/index.test.tsx.snap
index e56485ea57..9b413d9930 100644
--- a/packages/developer-portal/src/components/apps/new/__tests__/__snapshots__/index.test.tsx.snap
+++ b/packages/developer-portal/src/components/apps/new/__tests__/__snapshots__/index.test.tsx.snap
@@ -668,6 +668,16 @@ exports[`AppsNew should match a snapshot 1`] = `
                       please click here.
                     </a>
                   </mock-styled.p>
+                  <mock-styled.p
+                    classname="el-text-base el-has-grey-text"
+                  >
+                    From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+                     
+                    <a>
+                      please click here.
+                    </a>
+                     Apps registered prior to this date are unaffected by this change.
+                  </mock-styled.p>
                 </div>
               </div>
             </div>
@@ -691,6 +701,19 @@ exports[`AppsNew should match a snapshot 1`] = `
               >
                 Your application can be authenticated against our Platform either on the client-side or server-side. If you choose client-side authentication at the next step but later wish to upgrade to a full AgencyCloud integration in the future, you can do this. However, it is important to note, server-side integrations cannot be launched from within AgencyCloud.
               </mock-styled.p>
+              <mock-styled.p
+                classname="el-text-base el-has-grey-text"
+              >
+                From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+                 
+                <a
+                  role="link"
+                >
+                  please click here.
+                </a>
+                 
+                Apps registered prior to this date are unaffected by this change.
+              </mock-styled.p>
             </div>
             <div
               class="mock-css.
@@ -812,6 +835,19 @@ exports[`AppsNew should match a snapshot 1`] = `
                 </a>
                 to investigate which data sets and permissions you will need before getting started.
               </mock-styled.p>
+              <mock-styled.p
+                classname="el-text-base el-has-grey-text"
+              >
+                From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+                 
+                <a
+                  role="link"
+                >
+                  please click here.
+                </a>
+                 
+                Apps registered prior to this date are unaffected by this change.
+              </mock-styled.p>
             </div>
             <div
               class="mock-css.
@@ -842,6 +878,19 @@ exports[`AppsNew should match a snapshot 1`] = `
                   visit here
                 </a>
               </mock-styled.p>
+              <mock-styled.p
+                classname="el-text-base el-has-grey-text"
+              >
+                From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+                 
+                <a
+                  role="link"
+                >
+                  please click here.
+                </a>
+                 
+                Apps registered prior to this date are unaffected by this change.
+              </mock-styled.p>
             </div>
             <div
               class="mock-css.
@@ -883,6 +932,19 @@ exports[`AppsNew should match a snapshot 1`] = `
                 </a>
                  for quick start client-side development.
               </mock-styled.p>
+              <mock-styled.p
+                classname="el-text-base el-has-grey-text"
+              >
+                From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+                 
+                <a
+                  role="link"
+                >
+                  please click here.
+                </a>
+                 
+                Apps registered prior to this date are unaffected by this change.
+              </mock-styled.p>
             </div>
             <div
               class="mock-css.
@@ -996,10 +1058,10 @@ exports[`AppsNew should match a snapshot 1`] = `
         />
         <mock-styled.div
           classname=""
-          id=":r4:"
+          id=":r5:"
         >
           <mock-styled.button
-            aria-controls=":r4:"
+            aria-controls=":r5:"
             classname="el-floating-button el-intent-primary"
           >
             <mock-styled.div />
@@ -1689,6 +1751,16 @@ exports[`AppsNew should match a snapshot 1`] = `
                     please click here.
                   </a>
                 </mock-styled.p>
+                <mock-styled.p
+                  classname="el-text-base el-has-grey-text"
+                >
+                  From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+                   
+                  <a>
+                    please click here.
+                  </a>
+                   Apps registered prior to this date are unaffected by this change.
+                </mock-styled.p>
               </div>
             </div>
           </div>
@@ -1712,6 +1784,19 @@ exports[`AppsNew should match a snapshot 1`] = `
             >
               Your application can be authenticated against our Platform either on the client-side or server-side. If you choose client-side authentication at the next step but later wish to upgrade to a full AgencyCloud integration in the future, you can do this. However, it is important to note, server-side integrations cannot be launched from within AgencyCloud.
             </mock-styled.p>
+            <mock-styled.p
+              classname="el-text-base el-has-grey-text"
+            >
+              From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+               
+              <a
+                role="link"
+              >
+                please click here.
+              </a>
+               
+              Apps registered prior to this date are unaffected by this change.
+            </mock-styled.p>
           </div>
           <div
             class="mock-css.
@@ -1833,6 +1918,19 @@ exports[`AppsNew should match a snapshot 1`] = `
               </a>
               to investigate which data sets and permissions you will need before getting started.
             </mock-styled.p>
+            <mock-styled.p
+              classname="el-text-base el-has-grey-text"
+            >
+              From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+               
+              <a
+                role="link"
+              >
+                please click here.
+              </a>
+               
+              Apps registered prior to this date are unaffected by this change.
+            </mock-styled.p>
           </div>
           <div
             class="mock-css.
@@ -1863,6 +1961,19 @@ exports[`AppsNew should match a snapshot 1`] = `
                 visit here
               </a>
             </mock-styled.p>
+            <mock-styled.p
+              classname="el-text-base el-has-grey-text"
+            >
+              From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+               
+              <a
+                role="link"
+              >
+                please click here.
+              </a>
+               
+              Apps registered prior to this date are unaffected by this change.
+            </mock-styled.p>
           </div>
           <div
             class="mock-css.
@@ -1904,6 +2015,19 @@ exports[`AppsNew should match a snapshot 1`] = `
               </a>
                for quick start client-side development.
             </mock-styled.p>
+            <mock-styled.p
+              classname="el-text-base el-has-grey-text"
+            >
+              From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+               
+              <a
+                role="link"
+              >
+                please click here.
+              </a>
+               
+              Apps registered prior to this date are unaffected by this change.
+            </mock-styled.p>
           </div>
           <div
             class="mock-css.
@@ -2017,10 +2141,10 @@ exports[`AppsNew should match a snapshot 1`] = `
       />
       <mock-styled.div
         classname=""
-        id=":r4:"
+        id=":r5:"
       >
         <mock-styled.button
-          aria-controls=":r4:"
+          aria-controls=":r5:"
           classname="el-floating-button el-intent-primary"
         >
           <mock-styled.div />
@@ -2106,6 +2230,50 @@ exports[`AppsNew should match snapshot for mobile view 1`] = `
     <div
       id="root"
     >
+      <div>
+        <mock-styled.div
+          classname="el-is-active"
+        />
+        <mock-styled.div
+          aria-describedby=":r6:"
+          aria-modal="true"
+          classname="el-is-active"
+          role="dialog"
+        >
+          <mock-styled.div>
+            Important changes to refresh tokens
+          </mock-styled.div>
+          <mock-styled.div
+            id=":r6:"
+          >
+            <mock-styled.p
+              classname="el-text-base el-has-grey-text"
+            >
+              From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. Apps registered prior to this date were given reusable refresh tokens from Reapit Connect. New apps will only be given single use refresh tokens as part of enhanced security updates.
+            </mock-styled.p>
+            <mock-styled.p
+              classname="el-text-base el-has-grey-text"
+            >
+              For more information about this change,
+               
+              <a>
+                please click here.
+              </a>
+               Any apps registered prior to this date are unaffected by this change.
+            </mock-styled.p>
+            <mock-styled.p
+              classname="el-text-base el-has-grey-text"
+            >
+              <mock-styled.button
+                classname="el-intent-primary"
+              >
+                <mock-styled.div />
+                Close
+              </mock-styled.button>
+            </mock-styled.p>
+          </mock-styled.div>
+        </mock-styled.div>
+      </div>
       <div />
       <div />
       <div />
@@ -2776,6 +2944,16 @@ exports[`AppsNew should match snapshot for mobile view 1`] = `
                       please click here.
                     </a>
                   </mock-styled.p>
+                  <mock-styled.p
+                    classname="el-text-base el-has-grey-text"
+                  >
+                    From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+                     
+                    <a>
+                      please click here.
+                    </a>
+                     Apps registered prior to this date are unaffected by this change.
+                  </mock-styled.p>
                 </div>
               </div>
             </div>
@@ -2799,6 +2977,19 @@ exports[`AppsNew should match snapshot for mobile view 1`] = `
               >
                 Your application can be authenticated against our Platform either on the client-side or server-side. If you choose client-side authentication at the next step but later wish to upgrade to a full AgencyCloud integration in the future, you can do this. However, it is important to note, server-side integrations cannot be launched from within AgencyCloud.
               </mock-styled.p>
+              <mock-styled.p
+                classname="el-text-base el-has-grey-text"
+              >
+                From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+                 
+                <a
+                  role="link"
+                >
+                  please click here.
+                </a>
+                 
+                Apps registered prior to this date are unaffected by this change.
+              </mock-styled.p>
             </div>
             <div
               class="mock-css.
@@ -2920,6 +3111,19 @@ exports[`AppsNew should match snapshot for mobile view 1`] = `
                 </a>
                 to investigate which data sets and permissions you will need before getting started.
               </mock-styled.p>
+              <mock-styled.p
+                classname="el-text-base el-has-grey-text"
+              >
+                From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+                 
+                <a
+                  role="link"
+                >
+                  please click here.
+                </a>
+                 
+                Apps registered prior to this date are unaffected by this change.
+              </mock-styled.p>
             </div>
             <div
               class="mock-css.
@@ -2950,6 +3154,19 @@ exports[`AppsNew should match snapshot for mobile view 1`] = `
                   visit here
                 </a>
               </mock-styled.p>
+              <mock-styled.p
+                classname="el-text-base el-has-grey-text"
+              >
+                From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+                 
+                <a
+                  role="link"
+                >
+                  please click here.
+                </a>
+                 
+                Apps registered prior to this date are unaffected by this change.
+              </mock-styled.p>
             </div>
             <div
               class="mock-css.
@@ -2991,6 +3208,19 @@ exports[`AppsNew should match snapshot for mobile view 1`] = `
                 </a>
                  for quick start client-side development.
               </mock-styled.p>
+              <mock-styled.p
+                classname="el-text-base el-has-grey-text"
+              >
+                From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+                 
+                <a
+                  role="link"
+                >
+                  please click here.
+                </a>
+                 
+                Apps registered prior to this date are unaffected by this change.
+              </mock-styled.p>
             </div>
             <div
               class="mock-css.
@@ -3104,10 +3334,10 @@ exports[`AppsNew should match snapshot for mobile view 1`] = `
         />
         <mock-styled.div
           classname=""
-          id=":ra:"
+          id=":rc:"
         >
           <mock-styled.button
-            aria-controls=":ra:"
+            aria-controls=":rc:"
             classname="el-floating-button el-intent-primary"
           >
             <mock-styled.div />
@@ -3797,6 +4027,16 @@ exports[`AppsNew should match snapshot for mobile view 1`] = `
                     please click here.
                   </a>
                 </mock-styled.p>
+                <mock-styled.p
+                  classname="el-text-base el-has-grey-text"
+                >
+                  From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+                   
+                  <a>
+                    please click here.
+                  </a>
+                   Apps registered prior to this date are unaffected by this change.
+                </mock-styled.p>
               </div>
             </div>
           </div>
@@ -3820,6 +4060,19 @@ exports[`AppsNew should match snapshot for mobile view 1`] = `
             >
               Your application can be authenticated against our Platform either on the client-side or server-side. If you choose client-side authentication at the next step but later wish to upgrade to a full AgencyCloud integration in the future, you can do this. However, it is important to note, server-side integrations cannot be launched from within AgencyCloud.
             </mock-styled.p>
+            <mock-styled.p
+              classname="el-text-base el-has-grey-text"
+            >
+              From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+               
+              <a
+                role="link"
+              >
+                please click here.
+              </a>
+               
+              Apps registered prior to this date are unaffected by this change.
+            </mock-styled.p>
           </div>
           <div
             class="mock-css.
@@ -3941,6 +4194,19 @@ exports[`AppsNew should match snapshot for mobile view 1`] = `
               </a>
               to investigate which data sets and permissions you will need before getting started.
             </mock-styled.p>
+            <mock-styled.p
+              classname="el-text-base el-has-grey-text"
+            >
+              From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+               
+              <a
+                role="link"
+              >
+                please click here.
+              </a>
+               
+              Apps registered prior to this date are unaffected by this change.
+            </mock-styled.p>
           </div>
           <div
             class="mock-css.
@@ -3971,6 +4237,19 @@ exports[`AppsNew should match snapshot for mobile view 1`] = `
                 visit here
               </a>
             </mock-styled.p>
+            <mock-styled.p
+              classname="el-text-base el-has-grey-text"
+            >
+              From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+               
+              <a
+                role="link"
+              >
+                please click here.
+              </a>
+               
+              Apps registered prior to this date are unaffected by this change.
+            </mock-styled.p>
           </div>
           <div
             class="mock-css.
@@ -4012,6 +4291,19 @@ exports[`AppsNew should match snapshot for mobile view 1`] = `
               </a>
                for quick start client-side development.
             </mock-styled.p>
+            <mock-styled.p
+              classname="el-text-base el-has-grey-text"
+            >
+              From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it can handle rotating refresh tokens. For more information about this change,
+               
+              <a
+                role="link"
+              >
+                please click here.
+              </a>
+               
+              Apps registered prior to this date are unaffected by this change.
+            </mock-styled.p>
           </div>
           <div
             class="mock-css.
@@ -4125,10 +4417,10 @@ exports[`AppsNew should match snapshot for mobile view 1`] = `
       />
       <mock-styled.div
         classname=""
-        id=":ra:"
+        id=":rc:"
       >
         <mock-styled.button
-          aria-controls=":ra:"
+          aria-controls=":rc:"
           classname="el-floating-button el-intent-primary"
         >
           <mock-styled.div />
diff --git a/packages/developer-portal/src/components/apps/new/helper-content.tsx b/packages/developer-portal/src/components/apps/new/helper-content.tsx
index 5ed6a94670..1a9fe23a68 100644
--- a/packages/developer-portal/src/components/apps/new/helper-content.tsx
+++ b/packages/developer-portal/src/components/apps/new/helper-content.tsx
@@ -140,6 +140,12 @@ export const HelperContent: FC = () => {
               simply link out from your integrated app or render a pre-existing app in an iframe. For more information
               on the requirements, <a onClick={openNewPage(ExternalPages.acLaunchableDocs)}>please click here.</a>
             </BodyText>
+            <BodyText hasGreyText>
+              From November 2024, when registering an app that uses the authorisation code authentication flow, ensure
+              it can handle rotating refresh tokens. For more information about this change,{' '}
+              <a onClick={openNewPage(ExternalPages.refreshTokenDocs)}>please click here.</a> Apps registered prior to
+              this date are unaffected by this change.
+            </BodyText>
           </div>
         </FlexContainer>
       </div>
@@ -155,6 +161,14 @@ export const HelperContent: FC = () => {
           in the future, you can do this. However, it is important to note, server-side integrations cannot be launched
           from within AgencyCloud.
         </BodyText>
+        <BodyText hasGreyText>
+          From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it
+          can handle rotating refresh tokens. For more information about this change,{' '}
+          <a onClick={openNewPage(ExternalPages.refreshTokenDocs)} role="link">
+            please click here.
+          </a>{' '}
+          Apps registered prior to this date are unaffected by this change.
+        </BodyText>
       </div>
       <div className={cx(shouldShowStep(AppNewStepId.dataFeedStep) ? elFadeIn : stepIsHidden)}>
         <Subtitle hasBoldText>Data Portal and Reporting Feeds</Subtitle>
@@ -218,6 +232,14 @@ export const HelperContent: FC = () => {
           </Link>
           to investigate which data sets and permissions you will need before getting started.
         </BodyText>
+        <BodyText hasGreyText>
+          From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it
+          can handle rotating refresh tokens. For more information about this change,{' '}
+          <a onClick={openNewPage(ExternalPages.refreshTokenDocs)} role="link">
+            please click here.
+          </a>{' '}
+          Apps registered prior to this date are unaffected by this change.
+        </BodyText>
       </div>
       <div className={cx(shouldShowStep(AppNewStepId.reapitConnectStep) ? elFadeIn : stepIsHidden)}>
         <Subtitle hasBoldText>Using Reapit Connect as an Identity Provider</Subtitle>
@@ -232,6 +254,14 @@ export const HelperContent: FC = () => {
           interested in using our Sign In With Reapit button to embed on your own site{' '}
           <a onClick={openNewPage(ExternalPages.loginWithReapitDocs)}>visit here</a>
         </BodyText>
+        <BodyText hasGreyText>
+          From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it
+          can handle rotating refresh tokens. For more information about this change,{' '}
+          <a onClick={openNewPage(ExternalPages.refreshTokenDocs)} role="link">
+            please click here.
+          </a>{' '}
+          Apps registered prior to this date are unaffected by this change.
+        </BodyText>
       </div>
       <div className={cx(shouldShowStep(AppNewStepId.clientSideStep) ? elFadeIn : stepIsHidden)}>
         <Subtitle hasBoldText>Client Side Apps</Subtitle>
@@ -250,6 +280,14 @@ export const HelperContent: FC = () => {
           <a onClick={openNewPage(ExternalPages.craDocs)}>Create React App Template</a> for quick start client-side
           development.
         </BodyText>
+        <BodyText hasGreyText>
+          From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it
+          can handle rotating refresh tokens. For more information about this change,{' '}
+          <a onClick={openNewPage(ExternalPages.refreshTokenDocs)} role="link">
+            please click here.
+          </a>{' '}
+          Apps registered prior to this date are unaffected by this change.
+        </BodyText>
       </div>
       <div className={cx(shouldShowStep(AppNewStepId.serverSideStep) ? elFadeIn : stepIsHidden)}>
         <Subtitle hasBoldText>Server Side Apps</Subtitle>
diff --git a/packages/developer-portal/src/components/apps/new/index.tsx b/packages/developer-portal/src/components/apps/new/index.tsx
index 72b891f5ff..e7ed54c586 100644
--- a/packages/developer-portal/src/components/apps/new/index.tsx
+++ b/packages/developer-portal/src/components/apps/new/index.tsx
@@ -1,4 +1,5 @@
 import {
+  BodyText,
   Button,
   ButtonGroup,
   ColResponsive,
@@ -14,7 +15,7 @@ import {
   useMediaQuery,
   useModal,
 } from '@reapit/elements'
-import React, { Dispatch, FC, SetStateAction, MouseEvent, useEffect, KeyboardEvent } from 'react'
+import React, { Dispatch, FC, SetStateAction, MouseEvent, useEffect, KeyboardEvent, useState } from 'react'
 import { AppAuthFlow, AppNewStepId, getAppWizardStep } from './config'
 import { AppWizardState, useAppState } from '../state/use-app-state'
 import { ControlsContainer, StepContainer } from './__styles__'
@@ -42,6 +43,7 @@ import { NavigateFunction, useNavigate } from 'react-router-dom'
 import { HelperContent } from './helper-content'
 import { defaultAppWizardState } from '../state/defaults'
 import { Helper } from '../page/helper'
+import { ExternalPages, openNewPage } from '../../../utils/navigation'
 
 export interface CreateAppFormSchema {
   redirectUris?: string
@@ -228,8 +230,32 @@ export const AppsNewPage: FC = () => {
 
   const { headingText, headerText, iconName } = getAppWizardStep(currentStep)
 
+  const [refreshRotationModelIsOpen, setRefreshRotationModelIsOpen] = useState(true)
+
   return (
     <GridResponsive>
+      <Modal
+        isOpen={refreshRotationModelIsOpen}
+        title="Important changes to refresh tokens"
+        onModalClose={() => setRefreshRotationModelIsOpen(false)}
+      >
+        <BodyText hasGreyText>
+          From November 2024, when registering an app that uses the authorisation code authentication flow, ensure it
+          can handle rotating refresh tokens. Apps registered prior to this date were given reusable refresh tokens from
+          Reapit Connect. New apps will only be given single use refresh tokens as part of enhanced security updates.
+        </BodyText>
+        <BodyText hasGreyText>
+          For more information about this change,{' '}
+          <a onClick={openNewPage(ExternalPages.refreshTokenDocs)}>please click here.</a> Any apps registered prior to
+          this date are unaffected by this change.
+        </BodyText>
+        <BodyText hasGreyText>
+          <Button intent="primary" onClick={() => setRefreshRotationModelIsOpen(false)}>
+            Close
+          </Button>
+        </BodyText>
+      </Modal>
+
       <ColResponsive
         spanMobile={4}
         spanTablet={4}
diff --git a/packages/developer-portal/src/utils/navigation.ts b/packages/developer-portal/src/utils/navigation.ts
index e58233af55..f54e919608 100644
--- a/packages/developer-portal/src/utils/navigation.ts
+++ b/packages/developer-portal/src/utils/navigation.ts
@@ -33,6 +33,7 @@ export enum ExternalPages {
   codeExampleNetWebsite = 'https://github.com/reapit/foundations-code-examples/tree/main/dotnet-website-feed',
   iaasBugs = 'https://github.com/reapit/foundations/issues/new?assignees=&labels=bug%2C+needs-triage%2C+iaas%2C+front-end&template=bug_report.md&title=',
   appPermissionsDocs = 'https://foundations-documentation.reapit.cloud/listing-your-app/app-permissions',
+  refreshTokenDocs = 'https://foundations-documentation.reapit.cloud/api/reapit-connect#using-refresh-tokens',
 }
 
 export const openNewPage = (uri: ExternalPages | string) => (event?: MouseEvent) => {