intermediatetermWeb foundationsWeb foundations / Security / JWT Rotation
IntermediateNot yet reviewed

JWT Rotation

Regularly invalidating and refreshing JSON Web Tokens to reduce risk from compromised authentication tokens.

Definition

Regularly invalidating and refreshing JSON Web Tokens to reduce risk from compromised authentication tokens.

Use case

Issuing short-lived access tokens (15 mins) alongside refresh tokens to minimize security risk.

Related terms

Documentation

Refresh token rotation

Auth0 · Docs · link checked 2026-10-16

Short-lived tokens plus rotation, so stolen tokens expire fast.

Suggest a change