signature

The third part of a JWT, made with a key only the service holds. It means nobody can change a token without being caught.