made by CatMaid
A Minecraft bearer token is a JWT token used to authenticate with Minecraft's private API, which allows you to do stuff like change your skin, change your username or even join servers! Bearer tokens last 24 hours.
Note that this only lists current security risks, since most security risks have been removed after Minecraft's switch to Microsoft accounts. (for example: accessing your credit card information, changing your account's email, password and security questions, etc.)
Bearer tokens last 24 hours.Bearer tokens can't change account email or password
Bearer tokens do not provide the ability to change the associated Microsoft account email or password. To do that, the thief would need access to your Microsoft account itself (i.e., your email and password, or 2FA).Change account's skin
A malicious actor can upload a harmful or offensive skin under your name, which could result in consequences if used on public servers.Change account's username
A malicious actor can change your username to something harmful or offensive, which could result in consequences if used on public servers.Join servers
A malicious actor can join servers and possibly get you banned or face consequences on server by breaking server's rules. It can be huge issue on servers with server economy like Hypixel Skyblock, etc.
• Copy the bearer token that it shows in the console