Login to manage your account

Your email Please enter a valid email address.

Password Forgot Password?

Please enter a valid password.

OR

Don't have an account yet? Sign up

Which statement about JWT authentication is correct?

A JWTs are encrypted by default and safe to store any data in
B JWTs are signed but not encrypted, so the payload is readable by anyone holding the token
C JWTs cannot expire
D JWTs must be stored in localStorage

Answer

JWTs are signed but not encrypted, so the payload is readable by anyone holding the token

A standard JWT payload is base64-encoded, not encrypted. Never place sensitive data in it, and keep expiry times short.

All NodeJS MCQs

Login to manage your account

Your email id Please enter a valid email address.

Password Forgot Password?

Please enter a valid password.

OR

Don't have an account yet? Sign up as

Jobseeker

Employer