Drop-in replacement for JWT. One API call to sign and verify tokens using ML-DSA-65 — the post-quantum standard that NIST finalized in 2024.
Every JWT signed with RS256 or ES256 today can be forged by a sufficiently powerful quantum computer using Shor's algorithm.
Replace your JWT signing with PQAuth. Same interface, same developer experience — but tokens signed with ML-DSA-65.
// Traditional JWT — broken by Shor's algorithm import jwt from 'jsonwebtoken' const token = jwt.sign( { sub: user.id, email: user.email }, SECRET_KEY, { algorithm: 'RS256' } // ← vulnerable ) // Verify const payload = jwt.verify(token, PUBLIC_KEY)
// PQAuth — ML-DSA-65, NIST FIPS 204 import { PQAuth } from 'pqauth-sdk' const pqauth = new PQAuth('pqa_your_api_key') const { token } = await pqauth.sign({ sub: user.id, email: user.email }) // Verify const { valid, payload } = await pqauth.verify(token)
import { PQAuth } from 'pqauth-sdk' const pqauth = new PQAuth('pqa_your_api_key') // Protect all /api routes — reads Authorization: Bearer header automatically app.use('/api', pqauth.middleware()) app.get('/api/profile', (req, res) => { res.json({ user: req.user }) // payload attached automatically })
Start free. Scale when you need to. No hidden fees.
Free forever for small projects. No credit card required.