---
type: "Glossary term"
title: "Bearer token"
description: "A credential where mere possession grants access."
tags: [glossary]
generated: { by: human:crpage, at: 2026-07-09T09:44:00Z }
aliases: "bearer token; bearer"
status: stable
---

# Definition
A credential where **possession is enough** — anyone holding it can use it, so a stolen token can be replayed. Mitigated by [sender-constrained tokens](sender-constrained-token.md).

# Used in this bundle
Appears in: [oauth-2-0](../standards/oauth-2-0.md).

# Related terms
[sender constrained token](sender-constrained-token.md), [workload identity](workload-identity.md).