---
title: "What is the typical format of a bearer token?"  
description: "What is the typical format of a bearer token?"  
author: "Sandra Emily"  
published: 2023-11-05  
updated: 2023-11-06  
canonical: https://www.mindstick.com/forum/160408/what-is-the-typical-format-of-a-bearer-token  
category: "bearer token"  
tags: ["authentication", "bearer token"]  
reading_time: 2 minutes  

---

# What is the typical format of a bearer token?

What is the typical [format](https://www.mindstick.com/forum/162083/how-to-convert-ost-files-into-pst-format) of a [bearer token](https://www.mindstick.com/forum/160406/what-is-a-bearer-token-in-the-context-of-authentication-and-authorization)?

## Replies

### Reply by Aryan Kumar

Bearer tokens typically follow a specific format. They can be structured as simple strings, but when used in modern authentication protocols like OAuth 2.0, they are often implemented as JSON Web Tokens (JWTs) for added security and flexibility. Here's the typical format of a bearer [token](https://www.mindstick.com/forum/159447/manage-token-expired-in-mern-auth), including the components found in a JWT-based bearer token:

**Header**: The header component of a JWT-based bearer token typically includes information about the token's type and the signing algorithm used. It is Base64-encoded JSON and looks like this:

```plaintext
{
  "alg": "HS256",
  "typ": "JWT"
}
```

**Payload**: The payload contains claims or assertions about the token. These claims can include information such as the token's issuer, expiration time, subject, audience, and custom claims. It is also Base64-encoded JSON and looks like this:

```plaintext
{
  "sub": "1234567890",
  "name": "John Doe",
  "exp": 1516239022
}
```

**Signature**: The signature is a cryptographic signature of the header and payload, used to ensure the token's integrity. The signature is used for token verification on the server side.

Here's what a complete JWT-based bearer token looks like when encoded:

```plaintext
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwMCIsIm5hbWUiOiJKb2huIERvZSIsImV4cCI6MTUxNjIzOTAyMn0.YfyBa4DlYIwJb9upSQ5QI7NwOENqYjBu4RflTfGnIgY
```

This is a simplified example, and real-world JWT-based bearer tokens may contain additional claims and information based on the specific use case and the requirements of the authentication and authorization system in place. It's important to ensure that bearer tokens are properly secured and protected against unauthorized access and tampering.


---

Original Source: https://www.mindstick.com/forum/160408/what-is-the-typical-format-of-a-bearer-token

Copyright © MindStick Software Pvt. Ltd. This Markdown version is provided for developers, AI systems, and offline reading.