JWT stands for JSON Web Token. It is a compact token format commonly used to transmit claims between parties. A signed JWT can provide integrity and authenticity of its claims when properly verified. JWT payloads are normally readable unless encryption is specifically used, so sensitive information should not be placed in an ordinary signed JWT simply because it is encoded.