PHPackages                             1o/paseto - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. 1o/paseto

ActiveLibrary[Security](/categories/security)

1o/paseto
=========

Platform-Agnostic Security Tokens

v3.0.0(1y ago)071[1 PRs](https://github.com/1oio/paseto-php/pulls)ISCPHPPHP ^8.1

Since Jun 27Pushed 1y agoCompare

[ Source](https://github.com/1oio/paseto-php)[ Packagist](https://packagist.org/packages/1o/paseto)[ RSS](/packages/1o-paseto/feed)WikiDiscussions master Synced 1mo ago

READMEChangelogDependencies (6)Versions (3)Used By (0)

PASETO: Platform-Agnostic Security Tokens
=========================================

[](#paseto-platform-agnostic-security-tokens)

[![Build Status](https://github.com/paragonie/paseto/actions/workflows/ci.yml/badge.svg)](https://github.com/paragonie/paseto/actions)[![Latest Stable Version](https://camo.githubusercontent.com/47e374a9c1dbbf0fd0dab665b488b744e318febf7f82af7f0be91532350a02da/68747470733a2f2f706f7365722e707567782e6f72672f70617261676f6e69652f70617365746f2f762f737461626c65)](https://packagist.org/packages/paragonie/paseto)[![Latest Unstable Version](https://camo.githubusercontent.com/03c41fa2ed59c34984354a39155dc256860f2c346b8fd14aad45a701bd1e66f7/68747470733a2f2f706f7365722e707567782e6f72672f70617261676f6e69652f70617365746f2f762f756e737461626c65)](https://packagist.org/packages/paragonie/paseto)[![License](https://camo.githubusercontent.com/974bc3a459670e56dfb19097513013d9c50c5446a108814aa448e7ae52c89627/68747470733a2f2f706f7365722e707567782e6f72672f70617261676f6e69652f70617365746f2f6c6963656e7365)](https://packagist.org/packages/paragonie/paseto)[![Downloads](https://camo.githubusercontent.com/44ba443548c880d78a0a9be0e67029325c29b3fd62bb226b904492939c2742f8/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f64742f70617261676f6e69652f70617365746f2e737667)](https://packagist.org/packages/paragonie/paseto)

Paseto (pɔːsɛtəʊ, paw-set-oh) is everything you love about JOSE (JWT, JWE, JWS) without any of the [many design deficits that plague the JOSE standards](https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid).

This library is a reference implementation of PASETO in the PHP language. Please refer to the [**PASETO Specification**](https://github.com/paseto-standard/paseto-spec)for design considerations.

How to Use this Library
-----------------------

[](#how-to-use-this-library)

See [the documentation](https://github.com/paragonie/paseto/tree/master/docs).

The [PASETO specification](https://github.com/paseto-standard/paseto-spec) may also be useful for understanding why things are designed the way they are.

### PASETO Extensions

[](#paseto-extensions)

#### PASERK

[](#paserk)

For key wrapping, serialization, and canonical identification, please see the [PHP implementation of PASERK](https://github.com/paragonie/paserk-php).

If you're not sure what that means, please refer to the [PASERK specification](https://github.com/paseto-standard/paserk).

Since PASERK is a PASETO extension, PASERK support is not automatically included with PASETO, but PASETO is bundled with PASERK.

### Requirements

[](#requirements)

#### PHP PASETO Library Version 3

[](#php-paseto-library-version-3)

- Requires PHP 8.1 or newer.
- For v3 tokens, the GMP and OpenSSL extensions are required.
- For v4 tokens, the Sodium extension is strongly recommended (but this library will use [sodium\_compat](https://github.com/paragonie/sodium_compat) if it's not).
- PASETO Protocol versions: `v3`, `v4`

#### PHP PASETO Library Version 2

[](#php-paseto-library-version-2)

- Requires PHP 7.1 or newer.
- For v3 tokens, the GMP and OpenSSL extensions are required.
- For v4 tokens, the Sodium extension is strongly recommended (but this library will use [sodium\_compat](https://github.com/paragonie/sodium_compat) if it's not).
- PASETO Protocol versions: `v1`, `v2`, `v3`, `v4`

#### PHP PASETO Library Version 1

[](#php-paseto-library-version-1)

- Requires PHP 7.0 or newer.
- For v1 tokens, the OpenSSL extension is required.
- For v2 tokens, the Sodium extension is strongly recommended (but this library will use [sodium\_compat](https://github.com/paragonie/sodium_compat) if it's not).
- PASETO Protocol versions: `v1`, `v2`

Support Contracts
-----------------

[](#support-contracts)

If your company uses this library in their products or services, you may be interested in [purchasing a support contract from Paragon Initiative Enterprises](https://paragonie.com/enterprise).

###  Health Score

28

—

LowBetter than 54% of packages

Maintenance34

Infrequent updates — may be unmaintained

Popularity6

Limited adoption so far

Community19

Small or concentrated contributor base

Maturity49

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 71.8% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~0 days

Total

2

Last Release

681d ago

Major Versions

v1.1.0 → v3.0.02024-06-27

PHP version history (2 changes)v1.1.0PHP ^7|^8

v3.0.0PHP ^8.1

### Community

Maintainers

![](https://www.gravatar.com/avatar/d3501fb8c5db2259019bebe954b63b1971c8c765a2fa142439d34792b290fe93?d=identicon)[webamMarko](/maintainers/webamMarko)

---

Top Contributors

[![paragonie-security](https://avatars.githubusercontent.com/u/15914520?v=4)](https://github.com/paragonie-security "paragonie-security (403 commits)")[![paragonie-scott](https://avatars.githubusercontent.com/u/11591518?v=4)](https://github.com/paragonie-scott "paragonie-scott (49 commits)")[![aidantwoods](https://avatars.githubusercontent.com/u/3288888?v=4)](https://github.com/aidantwoods "aidantwoods (45 commits)")[![Etherealflux](https://avatars.githubusercontent.com/u/7762872?v=4)](https://github.com/Etherealflux "Etherealflux (17 commits)")[![Slamdunk](https://avatars.githubusercontent.com/u/152236?v=4)](https://github.com/Slamdunk "Slamdunk (10 commits)")[![KellerFuchs](https://avatars.githubusercontent.com/u/14331571?v=4)](https://github.com/KellerFuchs "KellerFuchs (6 commits)")[![ttescaroWagento](https://avatars.githubusercontent.com/u/106819136?v=4)](https://github.com/ttescaroWagento "ttescaroWagento (5 commits)")[![webamMarko](https://avatars.githubusercontent.com/u/70942010?v=4)](https://github.com/webamMarko "webamMarko (3 commits)")[![panva](https://avatars.githubusercontent.com/u/241506?v=4)](https://github.com/panva "panva (3 commits)")[![mstaack](https://avatars.githubusercontent.com/u/10169509?v=4)](https://github.com/mstaack "mstaack (2 commits)")[![mjpieters](https://avatars.githubusercontent.com/u/46775?v=4)](https://github.com/mjpieters "mjpieters (2 commits)")[![carnage](https://avatars.githubusercontent.com/u/846596?v=4)](https://github.com/carnage "carnage (2 commits)")[![minus7](https://avatars.githubusercontent.com/u/419104?v=4)](https://github.com/minus7 "minus7 (1 commits)")[![o1egl](https://avatars.githubusercontent.com/u/966539?v=4)](https://github.com/o1egl "o1egl (1 commits)")[![bluetechy](https://avatars.githubusercontent.com/u/6248629?v=4)](https://github.com/bluetechy "bluetechy (1 commits)")[![dconnolly](https://avatars.githubusercontent.com/u/552961?v=4)](https://github.com/dconnolly "dconnolly (1 commits)")[![carusogabriel](https://avatars.githubusercontent.com/u/16328050?v=4)](https://github.com/carusogabriel "carusogabriel (1 commits)")[![peter-evans](https://avatars.githubusercontent.com/u/18365890?v=4)](https://github.com/peter-evans "peter-evans (1 commits)")[![rlittlefield](https://avatars.githubusercontent.com/u/290970?v=4)](https://github.com/rlittlefield "rlittlefield (1 commits)")[![shuLhan](https://avatars.githubusercontent.com/u/43306?v=4)](https://github.com/shuLhan "shuLhan (1 commits)")

###  Code Quality

TestsPHPUnit

Static AnalysisPsalm

Type Coverage Yes

### Embed Badge

![Health badge](/badges/1o-paseto/health.svg)

```
[![Health](https://phpackages.com/badges/1o-paseto/health.svg)](https://phpackages.com/packages/1o-paseto)
```

###  Alternatives

[phpseclib/phpseclib

PHP Secure Communications Library - Pure-PHP implementations of RSA, AES, SSH2, SFTP, X.509 etc.

5.6k434.8M1.3k](/packages/phpseclib-phpseclib)[paragonie/paseto

Platform-Agnostic Security Tokens

3.4k1.3M18](/packages/paragonie-paseto)[paragonie/ciphersweet

Searchable field-level encryption library for relational databases

4641.2M21](/packages/paragonie-ciphersweet)[paragonie/certainty

Up-to-date, verifiable repository for Certificate Authorities

2642.4M20](/packages/paragonie-certainty)[paragonie/hidden-string

Encapsulate strings in an object to hide them from stack traces

7410.6M39](/packages/paragonie-hidden-string)[paragonie/anti-csrf

Paragon Initiative's Anti-CSRF Security Library

307200.6k5](/packages/paragonie-anti-csrf)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
