Installation

CLI

go install github.com/cerberauth/jwtop@latest

Requires Go 1.24 or later.

brew install cerberauth/tap/jwtop

docker run --rm ghcr.io/cerberauth/jwtop <command>

See the Docker guide for volume mounts, Compose, and CI usage.

Clone the repository:

git clone https://github.com/cerberauth/jwtop.git
cd jwtop

Build the binary:
Terminal window
```
go build -o jwtop .
```
Move it to your PATH:
Terminal window
```
mv jwtop /usr/local/bin/
```

Verify the installation:

jwtop version

Optional: external cracking tools

jwtop crack/jwtop exploit weaksecret can optionally fall back to the external john and hashcat tools for HMAC secret cracking on large wordlists. Neither is a jwtop dependency — install them only if you plan to use --john/--hashcat. See crack » External cracking tools for install commands and important caveats (the Debian/Ubuntu john package lacks the required formats; hashcat needs a compute backend).

GitHub Actions

To use jwtop in a GitHub Actions workflow, see the GitHub Actions guide.