# JWT Access Token vs Refresh Token — Practical Guide for Web Developers

JSON Web Token (JWT)–based authentication typically uses two complementary tokens: a short-lived access token (commonly 10–15 minutes) that authenticates API requests, and a longer-lived refresh token