PHPackages                             f21/jwt - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. f21/jwt

Abandoned → [lcobucci/jwt](/?search=lcobucci%2Fjwt)ArchivedLibrary[Authentication & Authorization](/categories/authentication)

f21/jwt
=======

JWT (JSON Web Tokens) for PHP

2.0(11y ago)329.1k14MITPHPPHP >=5.4.8

Since Jan 11Pushed 9y ago4 watchersCompare

[ Source](https://github.com/F21/jwt)[ Packagist](https://packagist.org/packages/f21/jwt)[ Docs](https://github.com/F21/jwt)[ RSS](/packages/f21-jwt/feed)WikiDiscussions master Synced 1mo ago

READMEChangelogDependenciesVersions (3)Used By (0)

JWT
===

[](#jwt)

A PHP library for encoding and decoding JSON Web Tokens.

Deprecration Notice
-------------------

[](#deprecration-notice)

This project is no longer being actively maintained. Please consider switching to [lcobucci/jwt](https://github.com/lcobucci/jwt) or one of the PHP libraries listed on [jwt.io](https://jwt.io/#libraries-io).

**Important security notice**

Thanks to Toshiharu Sugiyama!

Please upgrade to 2.0 as soon as possible as previous versions are susceptible to verification bypass attacks if the same public key is used for signing when using asymmetric and symmetric algorithms.

This is a release breaks backwards compatibility because you now need to pass in the decoding algorithm when decoding in order to verify the JWT.

For more information see: JVN#06120222 at jpcert.or.jp

Supported Algorithms
--------------------

[](#supported-algorithms)

**HMAC**

- HS256 - HMAC using SHA-256 hash algorithm (default)
- HS384 - HMAC using SHA-384 hash algorithm
- HS512 - HMAC using SHA-512 hash algorithm

**RSA (Public Key/Private Key pair)**

- RS256 - RSA using SHA-256 hash algorithm
- RS384 - RSA using SHA-384 hash algorithm
- RS512 - RSA using SHA-512 hash algorithm

###  Health Score

35

—

LowBetter than 80% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity32

Limited adoption so far

Community15

Small or concentrated contributor base

Maturity59

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 95.2% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~840 days

Total

2

Last Release

4035d ago

Major Versions

1.0 → 2.02015-05-01

PHP version history (2 changes)1.0PHP >=5.3.0

2.0PHP >=5.4.8

### Community

Maintainers

![](https://www.gravatar.com/avatar/5c54bc0cc2cfab1c497808d2d3cd21b4bafdbf8a5fa0a3ff79eda715c0f12ee8?d=identicon)[F21](/maintainers/F21)

---

Top Contributors

[![F21](https://avatars.githubusercontent.com/u/2263040?v=4)](https://github.com/F21 "F21 (20 commits)")[![julien-c](https://avatars.githubusercontent.com/u/326577?v=4)](https://github.com/julien-c "julien-c (1 commits)")

---

Tags

jwtjson web tokens

### Embed Badge

![Health badge](/badges/f21-jwt/health.svg)

```
[![Health](https://phpackages.com/badges/f21-jwt/health.svg)](https://phpackages.com/packages/f21-jwt)
```

###  Alternatives

[firebase/php-jwt

A simple library to encode and decode JSON Web Tokens (JWT) in PHP. Should conform to the current spec.

9.8k445.7M2.1k](/packages/firebase-php-jwt)[lcobucci/jwt

A simple library to work with JSON Web Token and JSON Web Signature

7.5k316.6M895](/packages/lcobucci-jwt)[tymon/jwt-auth

JSON Web Token Authentication for Laravel and Lumen

11.5k49.1M350](/packages/tymon-jwt-auth)[namshi/jose

JSON Object Signing and Encryption library for PHP.

1.8k99.6M101](/packages/namshi-jose)[web-token/jwt-framework

JSON Object Signing and Encryption library for PHP and Symfony Bundle.

94818.9M77](/packages/web-token-jwt-framework)[rbdwllr/reallysimplejwt

A really simple library to generate user authentication JSON Web Tokens.

2902.4M22](/packages/rbdwllr-reallysimplejwt)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)