# JWT Authentication

Generate Cobrowse JWTs server-side using your SDK key and SDK secret.

Guidelines:

- Never expose SDK secret client-side.
- Issue short-lived tokens.
- Generate different tokens for customer and agent roles.

See:
- [Authorization (official)](../references/authorization-official.md)
- [Get Started](../references/get-started-official.md)