JSON Web Token (JWT)

A compact, URL-safe token format for transmitting signed claims between parties.

A JSON Web Token (JWT) is a string of three Base64URL-encoded parts — header, payload, signature — separated by dots. The signature lets the receiver verify the token was issued by a trusted party and not modified. JWTs are widely used for stateless authentication in REST APIs and single-sign-on systems.
Reviewed by The Markvibe Team · Last updated 2026-06-28

Try it with these tools

See all Security Tools →

Related terms

  • Base64 — A binary-to-text encoding that represents data using 64 printable ASCII characters.
  • HMAC — A keyed-hash message authentication code that proves a message came from a holder of a shared secret.