A token format that represents things like authentication information compactly and tamper-evidently.
Short for JSON Web Token, a self-contained token format that's tamper-evident thanks to a signature, used for stateless authentication. It's structured as a header, payload, and signature joined by dots, and since the payload is just Base64-encoded, not encrypted, sensitive data should never be put there in the clear.
© 2026 ITBGM