# JWT Authentication

Using signed JWTs to securely authenticate the client.

---

Once the verification process succeeds (Status `VERIFIED`), our API returns a signed **JWT (JSON Web Token)** using the HS256 algorithm. The signing key is your project's Webhook Secret.

This token contains:
- The user's phone number
- Your project ID
- `trustScore`: Device trustworthiness for Adaptive Security.

You can safely verify this token in your backend to ensure 100% that the verification wasn't spoofed.