JWTs, or JSON Web Tokens, are used for stateless authentication in APIs, where the server generates a token with user claims and sends it to the client. The client then includes this token in subsequent requests, allowing for easy scalability and reduced server load since no session information is stored on the server side.