PASETO Token Decoder

PASETO (Platform-Agnostic Security Tokens) was designed to solve JWT's cryptographic agility flaws. Unlike JWTs, which allow the header to dictate the hashing algorithm (leading to algorithm confusion attacks), PASETO enforces strict versioning (e.g., v2, v4) mapping to specific, modern cryptographic suites that cannot be downgraded.

Yes. Our decoder locally parses the payload of all PASETO versions, including v4 public and local tokens. For 'public' tokens, you can see the JSON claims immediately. for 'local' tokens, the payload is symmetrically encrypted using XChaCha20-Poly1305, meaning you can see the footer but need the secret key to view the claims.

It depends on the purpose. Tokens with the '.public' suffix are digitally signed (using Ed25519 for v2/v4), meaning the data is visible but tamper-proof. Tokens with the '.local' suffix are authenticated encryption (using AES или XChaCha20), meaning the data is hidden from everyone except the key holders.