Paseto (Platform-Agnostic Security Tokens) is an open-source security token format designed as a more secure alternative to JWT (JSON Web Tokens). Unlike JWT, Paseto eliminates common cryptographic pitfalls by avoiding weak algorithms. It is designed to be secure by default, with built-in cryptographic best practices, making it ideal for applications requiring robust authentication and token management.

Features

  • Stronger security model compared to JWT
  • No support for insecure algorithms (like HMAC with SHA-1)
  • Easy to use with simple APIs for encoding and decoding
  • Supports both local and public (asymmetric) key cryptography
  • Built-in support for token expiration and claims
  • Compatible with multiple programming languages

Project Samples

Paseto Screenshot 1

Project Activity

See All Activity >