Is JSON Web Token (JWT) safe?

Asked Aug 27 '21 at 00:03

Active Aug 27 '21 at 06:43

Viewed 595 times

I'm new to programing and currently learning JavaScript, NodeJS with Express. I heard about JWT, but many people told me "its unsecure", "use sessions instead". But it doesn't seem more secure for me?

So I was wondering: How are you making your websites safe when using a login-area? Is JWT really unsafe? Thank you in advance!

edited Aug 27 '21 at 06:36

asked Aug 27 '21 at 00:03

Ron

3

Who are these "many people?" – OldProgrammer Aug 27 '21 at 00:07
I've been of the opinion to use JWT for authorisation, not for authentication- this guy does a decent job of explaining JWT - https://www.youtube.com/watch?v=7Q17ubqLfaM – Bravo Aug 27 '21 at 00:09
2

JWT is perfectly safe, storing in localStorage and/or transmitting over non-HTTPS is what makes it insecure – Lawrence Cherone Aug 27 '21 at 00:11

Is JSON Web Token (JWT) safe?

0 Answers0