Drop-in replacement for JWT. One API call to sign and verify tokens using ML-DSA-65 — the post-quantum standard that NIST finalized in 2024.
Every JWT signed with RS256 or ES256 today can be forged by a sufficiently powerful quantum computer using Shor's algorithm.
Replace your JWT signing with PQAuth. Same interface, same developer experience — but tokens signed with ML-DSA-65.
// Traditional JWT — broken by Shor's algorithm import jwt from 'jsonwebtoken' const token = jwt.sign( { sub: user.id, email: user.email }, SECRET_KEY, { algorithm: 'RS256' } // ← vulnerable ) // Verify const payload = jwt.verify(token, PUBLIC_KEY)
// PQAuth — ML-DSA-65, NIST FIPS 204 import { PQAuth } from 'pqauth-sdk' const pqauth = new PQAuth('pqa_your_api_key') const { token } = await pqauth.sign({ sub: user.id, email: user.email }) // Verify const { valid, payload } = await pqauth.verify(token)
import { PQAuth } from 'pqauth-sdk' const pqauth = new PQAuth('pqa_your_api_key') // Protect all /api routes — reads Authorization: Bearer header automatically app.use('/api', pqauth.middleware()) app.get('/api/profile', (req, res) => { res.json({ user: req.user }) // payload attached automatically })
Get up and running today. Paid plans coming soon.
Paid plans launching soon. Early adopters on the free plan will get priority access and discounted pricing.
Free forever for small projects. No credit card required.