---
title: Install JWTop on Linux | Snap Store
description: Get the latest version of JWTop for Linux - JWTop
url: https://snapcraft.io/jwtop
---

# JWTop

[CerberAuth](https://snapcraft.io/publisher/cerberauth "View all snaps from CerberAuth")

* [CerberAuth](https://snapcraft.io/publisher/cerberauth "View all snaps from CerberAuth")
* [Development](https://snapcraft.io/search?categories=development)
* [Security](https://snapcraft.io/search?categories=security)

latest/stable 0.8.0

Install latest/stable of JWTop

---

**Install using the command line**

```
sudo snap install jwtop
```

Don't have snapd? [Get set up for snaps](https://snapcraft.io/docs/installing-snapd).

---

### Package name

* jwtop

---

### License

* MIT

---

### Last updated

* 5 September 2026 - latest/stable
* 5 September 2026 - latest/edge

---

### Websites

* [www.cerberauth.com](https://www.cerberauth.com/docs/jwtop/ "https://www.cerberauth.com/docs/jwtop/")

---

### Contact

* [www.cerberauth.com](https://www.cerberauth.com/ "https://www.cerberauth.com/")

---

### Source code

* [github.com/cerberauth/jwtop](https://github.com/cerberauth/jwtop "https://github.com/cerberauth/jwtop")

---

### Report a bug

* [github.com/cerberauth/jwtop/issues](https://github.com/cerberauth/jwtop/issues "https://github.com/cerberauth/jwtop/issues")

---

##### Report a Snap Store violation

* [Report this Snap](https://snapcraft.io/jwtop#report-snap-modal)

---

* [Description](https://snapcraft.io/jwtop#tab-description)
* [Security](https://snapcraft.io/jwtop#tab-security)

#### JWTop

**JWTop** is a fast, developer-friendly JWT operations toolkit for the terminal. Decode, verify, create, sign, crack, and exploit JSON Web Tokens with a single CLI.

**Features**

* Decode and pretty-print any JWT without verifying the signature
* Verify signatures with HMAC secrets, RSA/ECDSA PEM keys, or JWKS endpoints
* Create and sign new tokens with custom claims, expiration, and issuer
* Re-sign existing tokens with a new algorithm or key
* Dictionary-attack weak HMAC secrets with built-in or custom wordlists
* Probe a live server for JWT vulnerabilities and report which exploits succeed

**Supported exploit techniques**

* `alg=none` bypass (all capitalisation variants)
* Blank secret and null signature attacks
* HMAC confusion (RSA/ECDSA public key used as HMAC secret)
* `kid` header injection (SQL injection, path traversal, raw)

**Supported algorithms**

* HMAC: HS256, HS384, HS512
* RSA: RS256, RS384, RS512
* RSA-PSS: PS256, PS384, PS512
* ECDSA: ES256, ES384, ES512

*The `exploit` and `crack` commands are intended for authorised security testing, penetration testing, CTF competitions, and educational purposes only. Never test systems you do not own or have explicit written permission to test.*

* Documentation: <https://www.cerberauth.com/docs/jwtop/>
* Source: <https://github.com/cerberauth/jwtop>

---

## Install JWTop on your Linux distribution

Choose your Linux distribution to get detailed installation instructions. If yours is not shown, get more details on the [installing snapd documentation](https://snapcraft.io/docs/installing-snapd).

[### Arch Linux](https://snapcraft.io/install/jwtop/arch)

[### CentOS](https://snapcraft.io/install/jwtop/centos)

[### Debian](https://snapcraft.io/install/jwtop/debian)

[### elementary OS](https://snapcraft.io/install/jwtop/elementary)

[### Fedora](https://snapcraft.io/install/jwtop/fedora)

[### KDE Neon](https://snapcraft.io/install/jwtop/kde-neon)

[### Kubuntu](https://snapcraft.io/install/jwtop/kubuntu)

[### Manjaro](https://snapcraft.io/install/jwtop/manjaro)

[### Pop!\_OS](https://snapcraft.io/install/jwtop/pop)

[### openSUSE](https://snapcraft.io/install/jwtop/opensuse)

[### Red Hat Enterprise Linux](https://snapcraft.io/install/jwtop/rhel)

[### Ubuntu](https://snapcraft.io/install/jwtop/ubuntu)

[### Raspberry Pi](https://snapcraft.io/install/jwtop/raspbian)