diff --git a/modules/setting/oauth2.go b/modules/setting/oauth2.go
index 76820adff0..86617f7513 100644
--- a/modules/setting/oauth2.go
+++ b/modules/setting/oauth2.go
@@ -104,7 +104,7 @@ var OAuth2 = struct {
 	Enabled:                    true,
 	AccessTokenExpirationTime:  3600,
 	RefreshTokenExpirationTime: 730,
-	InvalidateRefreshTokens:    false,
+	InvalidateRefreshTokens:    true,
 	JWTSigningAlgorithm:        "RS256",
 	JWTSigningPrivateKeyFile:   "jwt/private.pem",
 	MaxTokenLength:             math.MaxInt16,