Cookie Auth Expiry

Hey all, 

Does anyone know how long a cookie auth token is valid for, and is it best practice to call and create another one for each call to the API? 

Also, is there anyway to request an Auth Token without having to use an email and password? It doesn't seem so safe to share this information with 3rd party systems (in my case, Make.com). 

Thanks!