thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

DevOps & Automation · Intermediate

JSON Web Token (JWT)

A compact, URL-safe token format consisting of a base64url-encoded header, payload of claims, and signature.

Definition

JWTs carry claims such as iss, sub, aud, and exp and are signed (JWS) so receivers can verify integrity. The payload is readable by anyone unless encrypted (JWE), so it should not contain secrets.

Example

Authorization: Bearer eyJhbGciOiJSUzI1NiIs...

Exam tip

Signed JWTs are not encrypted; always validate signature, expiration, and audience.

Related terms