Developer Guides
What Is a JWT? How to Read One Without Trusting It
A JWT isn't encrypted: anyone can decode it. We take one token apart by hand, explain its claims and signature, and cover the checks a server must make.
Developer Guides
A JWT isn't encrypted: anyone can decode it. We take one token apart by hand, explain its claims and signature, and cover the checks a server must make.
Security & Privacy
Encoding can be reversed by anyone, hashing can't be reversed at all, and encryption needs a key. Here's one message run through all three, and how to choose.
Developer Guides
Base64 rewrites any bytes using 64 safe text characters. Here's how the encoding works, where the extra third comes from, and where you'll run into it.