# jwt-cracker

jwt-cracker is a Penetration Testing product. It runs on-premises. Pricing is free.

A simple JWT token brute force cracker

Checked October 2026.

## What is jwt-cracker?

Simple HS256, HS384 & HS512 JWT token brute force cracker.

This tool is designed to help security professionals and developers to test the security of their JWT tokens.

It supports HS256, HS384 & HS512 algorithms and can be used to crack weakly generated JWT tokens.

Please note that this tool is for educational purposes only and should not be used to crack JWT tokens without the owner's consent.

Tags: JWT, JWT Security

## Quick facts

- Category: [Offensive Security](https://cybersectools.com/categories/offensive-security-testing) · [Penetration Testing](https://cybersectools.com/categories/pentesting-tools)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 1,131
- Website: github.com

## jwt-cracker FAQ

### What is jwt-cracker?

jwt-cracker is a product in the Penetration Testing category. It covers JWT and JWT Security.

### What is the pricing for jwt-cracker?

jwt-cracker is free. Download and setup instructions are at https://github.com/lmammino/jwt-cracker/.

### What are alternatives to jwt-cracker?

Alternatives to jwt-cracker listed on CybersecTools:

1. [Managed Autonomous Pentesting (MAP)](https://cybersectools.com/tools/hackurity-art-stack) - Managed continuous autonomous pentesting using payload-less exploitation and attack paths (Commercial)
2. [XBOW Captcha Bypass Tool](https://cybersectools.com/tools/xbow-captcha-bypass-tool) - AI-powered automated penetration testing platform for vulnerability discovery (Commercial)
3. [Burp Suite Professional](https://cybersectools.com/tools/burp-suite-professional) - A web application security testing platform that combines manual and automated testing tools for conducting comprehensive security assessments and penetration testing. (Commercial)
4. [FireCompass AI-powered Pen Testing](https://cybersectools.com/tools/firecompass-ai-powered-pen-testing) - AI-powered automated pen testing & continuous red teaming platform (Commercial)
5. [ImmuniWeb® On-Demand](https://cybersectools.com/tools/immuniwebr-on-demand) - ImmuniWeb® On-Demand is a web application penetration testing platform that combines AI-powered automation with manual security testing to provide comprehensive vulnerability assessments and compliance reporting. (Commercial)

Compare all jwt-cracker alternatives at [https://cybersectools.com/alternatives/jwt-cracker](https://cybersectools.com/alternatives/jwt-cracker)

### What deployment and organization size does jwt-cracker fit?

jwt-cracker is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare jwt-cracker with similar solutions

- [jwt-cracker vs Managed Autonomous Pentesting (MAP)](https://cybersectools.com/compare/hackurity-art-stack-vs-jwt-cracker)
- [jwt-cracker vs XBOW Captcha Bypass Tool](https://cybersectools.com/compare/jwt-cracker-vs-xbow-captcha-bypass-tool)
- [jwt-cracker vs Burp Suite Professional](https://cybersectools.com/compare/burp-suite-professional-vs-jwt-cracker)

All alternatives to jwt-cracker: [/alternatives/jwt-cracker](https://cybersectools.com/alternatives/jwt-cracker)

---

Source: https://cybersectools.com/tools/jwt-cracker

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on jwt-cracker: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md