About Cyberway
What Cyberway is
Cyberway is a free set of JWT tools and security guides hosted at cyberway.dev. The JWT Decoder and JWT Generator run entirely in your browser. The blog publishes practical guides on authentication, claims, and common JWT pitfalls. JWT tools that run entirely in your browser.
Why everything runs in your browser
JWTs often carry sensitive claims — user ids, roles, session hints. Many online decoders send your token to a server for processing. Cyberway does the opposite: decode, verify, and sign happen on your device. Nothing you paste is transmitted to Cyberway for processing. That design choice matters when you are debugging production tokens or learning with real samples. Read the full details in our Privacy Policy.
Who maintains Cyberway
Mariana Soto — Software developer with a focus on cybersecurity and authentication. Mariana built Cyberway out of a long-standing passion for cybersecurity — especially the practical side of authentication, token handling, and helping developers avoid the mistakes that lead to real breaches. She writes the guides here to make JWT concepts concrete, not just theoretical.
How we write guides
Every article on the blog is written and reviewed for accuracy before publication. We include tested code examples, link to authoritative sources such as RFC 7519 and OWASP guidance, and tie concepts back to the Cyberway tools so you can inspect tokens yourself. These guides are educational — they do not replace a professional security audit of your production systems.
Tools & resources
- JWT Decoder — decode header and payload, check expiry, optionally verify signatures
- JWT Generator — create signed tokens with HS256, RS256, or ES256 for local testing
- Blog — JWT authentication guides and security notes
- Weekly JWT challenge — public sample tokens with deliberate flaws to investigate
