Abstract Stands for JSON Web Token Can be stored inside Cookie, Request Body Able to tell if anyone has modified itself 3 main components Header Payload/body Claims Signature Terminologies Claims Data or key-value pair inside the token