JWT
Technology & Computing abbreviation · Cybersecurity
| Stands for | JSON Web Token |
|---|---|
| Categories | Technology & Computing |
JWT stands for JSON Web Token, a cybersecurity abbreviation.
A compact, URL-safe token that carries signed JSON claims, such as a user ID and expiry time, in three base64url-encoded parts separated by dots. APIs and single-page apps use JWTs to authenticate requests without server-side sessions.
Example: Send the JWT in the Authorization header as a Bearer token on every API call.
Usage notes
Defined in RFC 7519 (2015). The payload is only encoded, not encrypted, so anyone holding a token can read it and secrets should never go inside. Past library bugs accepted the "none" algorithm or confused key types, letting attackers forge tokens. Because a JWT cannot easily be revoked before it expires, short lifetimes plus refresh tokens are standard. Often pronounced "jot".
Related abbreviations
More cybersecurity abbreviations
- IAM – Identity and access management
- IDS – Intrusion detection system
- IoC – Indicator of compromise
- IPS – Intrusion prevention system
- IR – Incident response
- ISO 27001 – ISO/IEC 27001 (information security management standard)
- KMS – Key Management Service
- MAC – Mandatory access control
- MD5 – Message-Digest Algorithm 5
- MDM – Mobile device management
- MDR – Managed detection and response
- MFA – Multi-factor authentication