All the benefits of JWT and then some...

Single or limited use

Revoke tokens after a single use, or after a specified number of uses, making it ideal for security sensitive scenarios like password/account recovery, 2FA, and password-less authentication.

Revocable

Remotely invalidate tokens, individually or as a group, making it ideal for session management, 2FA, and password/account recovery scenarios, where previously generated tokens can be revoked when a new one is issued.

Sliding Expiration

Sliding sessions offer security benefits by allowing short-lived sessions that respond to user activity.

Larger Payloads

Because the payload is not passed around in query strings or stored in cookies, our tokens can support up to 64kb of payload data.

Encryption @ Rest

Experience peace of mind with encryption at rest, safeguarding your sensitive data from unauthorized access even when it's stored.

Payload Security

Because the payload is not passed around in query strings or stored in cookies, the contents of the payload are not exposed to the user or the browser.

Easy to Create. Easy to Manage.

      
import {createToken, updateToken, revokeToken} from 'x-tkn'

let data = {
    type: 'session',
    payload: {'hello': 'world'},
    uses: 0,
    maxUses: 1,
    expiresAt: new Date('2040-07-10 15:00:00.000')
}

let token = await createToken(data)

await updateToken(token.id, {maxUses: 2})

await revokeToken(token.id)

Learn more about our SDK

"Why not just build it ourselves?"

Almost every application has one or more requirements where stateful web tokens are needed. Although any development team could build these tools on their own - and probably have many times - it takes time and money to code, test, deploy and maintain these systems. And when security is a primary concern, this investment can be considerable. X-TKN offers an easy-to-use toolkit that helps turn weeks of traditional development into minutes.

See what we can do in just minutes

Contact Us

How can we help you?

Please tell us your name, your email address and how we can help you

Thank you for contacting us

We will get back to you as fast as humanly possible

Terms and Conditions | Privacy Policy

Stateful Web Tokens

Secure alternatives to JWTs

Generate and Manage 2FA Challenges, OTPs, Sliding User Sessions, Password Reset Requests, API Keys ... and more, with Ease.