← Tech dictionary
Security
What is JWT?
Also called: JSON Web Token
A JSON Web Token is a signed token of three Base64 parts — header, payload and signature — used to prove who a user is on each API request without server-side sessions. Its payload is readable by anyone, so it must never contain secrets.
Learn it properlySpring Boot tutorials — free, with diagrams, quizzes and a certificate