Site's being rebuilt - bugs possible. Join our Discord for help.
All guides

Discord Token Format Explained: How Tokens Work

Discord tokens look like a random string of characters, but they actually follow a specific structure. Understanding it helps you spot fake or malformed tokens before you waste time trying to use them.

The Three Parts of a Discord Token

A standard Discord token is made up of three sections separated by periods:

  1. User ID (Base64 encoded) - the account's unique Discord ID, encoded
  2. Timestamp (Base64 encoded) - when the token was generated
  3. HMAC signature - a cryptographic signature verifying the token hasn't been tampered with

A typical token looks like: [UserID].[Timestamp].[HMAC]

Why Format Matters When Buying Tokens

A correctly formatted token isn't a guarantee it works, but a token that doesn't match this three-part structure is guaranteed to be broken or fake. Checking the format is a fast first filter before doing a full validity check.

Common Token Format Mistakes

  • Extra whitespace - a trailing space or newline copied along with the token will break login
  • Truncated tokens - copying only part of the string, usually from a text box that cut it off
  • Old token format artifacts - tokens copied from outdated guides sometimes include prefixes that no longer apply

Tokens vs Passwords

A token functions as a persistent login credential - unlike a password, it doesn't require 2FA or CAPTCHA on each use, which is exactly why it's the credential automation tools like G4Raid and G4MassDM are built around instead of scripting a full password login flow.

Buy Correctly Formatted, Working Tokens

G4Tools tokens are validated before delivery, so you're never stuck debugging a malformed string. Buy Discord tokens.