A new, secure way to authenticate Messenger users — with JWTs

We’ve introduced a new way to authenticate users in the Messenger, using JSON Web Tokens (JWTs).

This update replaces the previous Identity Verification (IdV) method with features designed to protect user data.

With JWTs, you benefit from:

✅ Data protection — Sign and protect both user ID and email, along with any other user attributes.

✅ Short-lived tokens — JWTs can be set to expire, reducing the risk of misuse for compromised tokens.

If you’re using Identity Verification, migrate to JWTs to benefit from these improvements. Identity Verification will continue to work, but is considered deprecated and will not receive future updates.

You’ll find the new JWT configuration in the Security tab within your Messenger settings.