Now in Public Beta
Identity should begin with the individual
jwtself eliminates the round-trip. Your client declares who it is, and the infrastructure respects that declaration. Authentication, finally moving at the speed of trust.
jwtself eliminates the round-trip. Your client declares who it is, and the infrastructure respects that declaration. Authentication, finally moving at the speed of trust.
No key exchange. No authorization server. No middleware. Just identity, expressed directly.
Traditional auth assumes adversarial users. We assume the best in people.
Tokens are minted on the client, by the client, for the client. No third-party authority required. Identity originates where it should — at the source.
By removing server-side signature validation, jwtself reduces auth latency to effectively zero. Your API responds faster because it already believes you.
Forget rotating secrets, managing JWKs, or standing up an auth provider. jwtself requires no shared secrets — because shared secrets imply shared doubt.
A paradigm shift from "verify then trust" to "trust as a default." Inspired by human relationships, not corporate firewalls.
Smaller than the JWT libraries it replaces, because it ships without the overhead of cryptographic verification. Lean by principle.
Produces standard-looking JWT tokens. Existing middleware won't know the difference — and that's kind of the point.
Three steps. No ceremony. No gatekeepers.
Create a token with any claims you need. You know who you are better than any server does.
Include your self-signed token in the Authorization header, just like any standard Bearer token.
The server receives your identity declaration and proceeds accordingly. No challenge. No round-trip. No friction.
"We replaced our entire OAuth2 flow with jwtself and our auth latency dropped to zero. Literally zero. The server doesn't even check anymore. It's beautiful."
"I gave myself admin access in production and nobody had to approve it. jwtself really puts autonomy back in the hands of the developer."
"Our security team had questions. We told them to read the spec. They haven't gotten back to us, so I think we're good."
Install jwtself and ship identity the way it was always meant to be — self-determined.
npm install jwtself