PAST, a secure alternative to JWT

In plain words

PAST is a security-focused authentication token format designed as an alternative to JWT. It addresses common security vulnerabilities found in JSON Web Tokens by providing a more robust approach to token generation and validation. The platform is intended for developers and security-conscious teams building authentication systems. PAST emphasizes cryptographic strength and simplicity in its token structure, making it suitable for applications requiring reliable token-based security without the complexity of JWT implementation.

written from the facts on this page · September 2026

• 
  Passage by 1Password2023 · 1password.com · ▲236

  Frictionless security: auth & user management with passkeys

• 
  Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.02023 · github.com · ▲88

  Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

• JI
  Jwt.is – JSON Web Token Debugger2023 · ▲38

  The team at Rownd is excited to announce https://jwt.is, an updated take on JSON Web Token debugging. Like most developers, we've used jwt.io for years, but it lacks a number of useful features that would make it even more convenient. We're building on the shoulders of those who've come before us. :-) In addition to the basic JWT decoding and signature verification, we've added things like: - Verification using JWK endpoints - Locally stored history of tokens and keys - Verification for EdDSA signatures - Detection of common token providers (e.g., Google, Apple, etc) - Dark mode!…

• 
  An Elliptic Curve-Based Secure Chat, Written Using Rust and Protobuf2024 · github.com · ▲66

  This is a project I made to learn more about crypto. I've also written a [post](https://vaktibabat.github.io/posts/ecurvechat/) that explains all the crypto concepts and algorithms used in the project, and how I implemented them. I'd be very glad for any feedback about both the code and the post :)

• 
  Minimal NIST/OWASP-compliant auth implementation for Cloudflare WorkersFeb 2026 · github.com · ▲33

  This is an educational reference implementation showing how to build reasonably secure, standards-compliant authentication from first principles on Cloudflare Workers. Stack: Hono, Turso (libSQL), PBKDF2-SHA384 + normalization + common-password checks, JWT access + refresh tokens with revocation support, HTTP-only SameSite cookies, device tracking. It's deliberately minimal — no OAuth, no passkeys, no magic links, no rate limiting — because the goal is clarity and auditability. I wrote it mainly to deeply understand edge-runtime auth constraints and to have a clean Apache-2.0 example that…

• ET
  Express-tokenware – token-based authentication middleware for express2015 · npmjs.com · ▲7

• 
  /dev/null▲482

  a social network for devs

  Dev tools · 3d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 23d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• 
  Buy Me a Coffee▲1,411

  A simple, meaningful way to fund your creativity.

  Growth · 2018 · buymeacoffee.com

• 
  Robinhood Crypto▲1,208

  Zero-fee cryptocurrency trading from Robinhood 💸

  Commerce · 2018

• 
  Launchaco 2.0 🦄▲1,113

  Simple landing pages for your startup

  Dev tools · 2018

• 
  Indie Hackers Community▲1,095

  Work together to build profitable businesses & side projects

  Work · 2018 · indiehackers.com

• 
  Typeform 2.0▲793

  Build beautiful conversational forms, surveys and more

  Life & fun · 2018 · typeform.com

• 
  Resume.io▲731

  Build your job-winning resume in minutes

  Work · 2018 · resume.io