# Install libjwt with Homebrew, apk, apt, dnf, MacPorts, Nix, zypper

JSON Web Token C library. Version 3.6.1 via Homebrew; verified 2026-06-30.

## Install

```sh
sudo av install brew:libjwt
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install libjwt
```

  Evidence: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install libjwt
```

  Evidence: MacPorts ports tree: devel/libjwt/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add libjwt
```

  Evidence: Alpine Linux edge package indexes: libjwt from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install libjwt-dev
```

  Evidence: Debian stable package indexes: libjwt-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install libjwt
```

  Evidence: Fedora Rawhide package metadata: libjwt from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#libjwt
```

  Evidence: nixpkgs package indexes: pkgs/by-name/li/libjwt/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- zypper (92%):

```sh
sudo zypper install libjwt-devel
```

  Evidence: openSUSE Tumbleweed package metadata: libjwt-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

## Package facts

- **Package key:** brew:libjwt
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/libjwt>
- **Version:** 3.6.1
- **Source summary:** JSON Web Token C library
- **Homepage:** <https://libjwt.io/>
- **Repository:** <https://github.com/benmcollins/libjwt>
- **Upstream docs:** <https://libjwt.io/>
- **License:** MPL-2.0
- **Source archive:** <https://github.com/benmcollins/libjwt/archive/refs/tags/v3.6.1.tar.gz>
- **Last updated:** 2026-06-30T04:08:24Z
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- jwk2key (cli)
- jwt-generate (cli)
- jwt-verify (cli)
- key2jwk (cli)
- jwk2key (alias)
- jwt-generate (alias)
- jwt-verify (alias)
- key2jwk (alias)

## Dependencies

- jansson
- openssl@3

## Build dependencies

- cmake
- pkgconf

## Install behavior

- Post-install hook: not defined
- Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 3.6.1
- Package-manager updated: 2026-06-30
- Local data: ok
- Upstream repository: https://github.com/benmcollins/libjwt
- Upstream latest detected: v3.6.1 (current)
## Project history and usage

LibJWT is a C library for JSON Web Token and adjacent JOSE formats. It gives C programs JWT creation, verification, JWK/JWKS handling, JWS, JWE, and multiple crypto-backend choices without making the application shell out to higher-level language tooling.

### Project history

Ben Collins moved the Git repository in May 2015, and the v1.0.0 tag is anchored to that early public history. The project later expanded beyond basic JWT signing and validation into a broader JOSE library surface, including JWS serializations, JWE serializations, JWK thumbprints, remote JWKS caching, DPoP, and application-profile helpers.

The documentation tracks the IETF standards that shaped the library, including RFC 7515 through RFC 7519 for JWS, JWE, JWK, JWA, and JWT, plus later standards such as RFC 7638, RFC 8725, RFC 9068, RFC 9278, and RFC 9449.

### Adoption history

LibJWT is packaged across many Unix-like systems, including Homebrew, Debian, Ubuntu, Fedora, Alpine, MacPorts, Nix, and openSUSE. That distribution spread reflects a common packaging need: C and C-adjacent services need JWT/JWK primitives without embedding a large web framework.

The project also evolved with the crypto-backend landscape. Its README documents OpenSSL, GnuTLS, and MbedTLS support, plus JSON backends through Jansson or json-c, letting distributors choose dependencies that match platform policy.

### How it is used

Common uses include signing JWTs, verifying tokens against local keys or JWKS keyrings, generating JWKs, handling key rotation through cached remote JWKS, and building tokens for application profiles such as access-token JWTs, DPoP, VAPID, PASSporT, OpenID4VCI, mTLS, and JAdES.

### Why package nerds care

LibJWT is interesting to package maintainers because security-sensitive C libraries have unusually sharp dependency and ABI edges. The package exposes choices among crypto libraries, JSON parsers, and optional libcurl support while staying useful as a small shared library and command-line utility bundle.

### Timeline

- 2015-05-19: v1.0.0 tag points at the repository-move commit.
- 2016-11-05: v1.6.1 tag was committed.
- 2020s: Documentation covers JWS, JWE, JWK, JWKS, DPoP, JWT Best Current Practices, and access-token profiles.
- 2026: README documents experimental ML-DSA support tied to FIPS 204 and RFC 9964.

### Related projects

- Related standards and projects include JWT.io, the JOSE RFC family, OpenSSL, GnuTLS, MbedTLS, Jansson, json-c, and libcurl.

### Sources

- <https://datatracker.ietf.org/doc/html/rfc7519>
- <https://formulae.brew.sh/formula/libjwt>
- <https://github.com/benmcollins/libjwt>
- <https://github.com/benmcollins/libjwt/tags>
- <https://libjwt.io/>


## Security Notes

library-like package without higher-risk signals.

- **Geiger risk:** green / low
- library-like package without higher-risk signals

## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** libjwt
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## Other Package-Manager Records

- Debian apt - libjwt-dev - 1.17.2-1: normalized package name match | Debian stable package indexes: libjwt-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | C library to handle JWT (JSON Web Token) - development | https://github.com/benmcollins/libjwt
- Debian apt - libjwt-gnutls-dev - 1.17.2-1: normalized package name match | Debian stable package indexes: libjwt-gnutls-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Development files for libjwt - GnuTLS flavour | https://github.com/benmcollins/libjwt
- Debian apt - libjwt-gnutls2 - 1.17.2-1: normalized package name match | Debian stable package indexes: libjwt-gnutls2 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | C library to handle JWT (JSON Web Token) - GnuTLS flavour | https://github.com/benmcollins/libjwt
- Debian apt - libjwt2 - 1.17.2-1: normalized package name match | Debian stable package indexes: libjwt2 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | C library to handle JWT (JSON Web Token) | https://github.com/benmcollins/libjwt
- Nix - libjwt: normalized package name match | nixpkgs package indexes: pkgs/by-name/li/libjwt/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - libjwt-dev - 1.17.0-2build2: normalized package name match | Ubuntu 24.04 LTS package indexes: libjwt-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | C library to handle JWT (JSON Web Token) - development | https://github.com/benmcollins/libjwt
- Ubuntu apt - libjwt-gnutls-dev - 1.17.0-2build2: normalized package name match | Ubuntu 24.04 LTS package indexes: libjwt-gnutls-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Development files for libjwt - GnuTLS flavour | https://github.com/benmcollins/libjwt
- Ubuntu apt - libjwt-gnutls2 - 1.17.0-2build2: normalized package name match | Ubuntu 24.04 LTS package indexes: libjwt-gnutls2 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | C library to handle JWT (JSON Web Token) - GnuTLS flavour | https://github.com/benmcollins/libjwt
- Ubuntu apt - libjwt2 - 1.17.0-2build2: normalized package name match | Ubuntu 24.04 LTS package indexes: libjwt2 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | C library to handle JWT (JSON Web Token) | https://github.com/benmcollins/libjwt
- apk - libjwt - 3.3.3-r0: normalized package name match | Alpine Linux edge package indexes: libjwt from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The C JSON Web Token Library +JWK +JWKS | https://github.com/benmcollins/libjwt
- apk - libjwt-dev - 3.3.3-r0: normalized package name match | Alpine Linux edge package indexes: libjwt-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The C JSON Web Token Library +JWK +JWKS (development files) | https://github.com/benmcollins/libjwt
- apk - libjwt-doc - 3.3.3-r0: normalized package name match | Alpine Linux edge package indexes: libjwt-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The C JSON Web Token Library +JWK +JWKS (documentation) | https://github.com/benmcollins/libjwt
- apk - libjwt-static - 3.3.3-r0: normalized package name match | Alpine Linux edge package indexes: libjwt-static from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The C JSON Web Token Library +JWK +JWKS (static library) | https://github.com/benmcollins/libjwt
- apk - libjwt-tools - 3.3.3-r0: normalized package name match | Alpine Linux edge package indexes: libjwt-tools from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Tools for JWT and JWK(S) from libjwt | https://github.com/benmcollins/libjwt
- dnf - libjwt - 1.12.1-21.fc44: normalized package name match | Fedora Rawhide package metadata: libjwt from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | A Javascript Web Token library in C | https://github.com/benmcollins/libjwt
- dnf - libjwt-devel - 1.12.1-21.fc44: normalized package name match | Fedora Rawhide package metadata: libjwt-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Development files for libjwt | https://github.com/benmcollins/libjwt


## Related links

- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Text processing packages](https://www.automicvault.com/pkg/text-processing-tools/) - Matched text, document, or structured-data processing metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata.
- [openssl@3](https://www.automicvault.com/pkg/brew/openssl-3/) - Runtime dependency declared by Homebrew.
- [cmake](https://www.automicvault.com/pkg/brew/cmake/) - Build dependency declared by Homebrew.
- [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew.
- [jose](https://www.automicvault.com/pkg/brew/jose/) - Shares av.db curated category or tags: cli, cryptography, jwe, jws, jwt.
- [cyrus-sasl](https://www.automicvault.com/pkg/brew/cyrus-sasl/) - Shares av.db curated category or tags: authentication, cli, security.
- [google-authenticator-libpam](https://www.automicvault.com/pkg/brew/google-authenticator-libpam/) - Shares av.db curated category or tags: authentication, cli, security.
- [heimdal](https://www.automicvault.com/pkg/brew/heimdal/) - Shares av.db curated category or tags: authentication, cli, security.
- [krb5](https://www.automicvault.com/pkg/brew/krb5/) - Shares av.db curated category or tags: authentication, cli, security.
- [kstart](https://www.automicvault.com/pkg/brew/kstart/) - Shares av.db curated category or tags: authentication, cli, security.
- [libu2f-server](https://www.automicvault.com/pkg/brew/libu2f-server/) - Shares av.db curated category or tags: authentication, cli, security.
- [libyubikey](https://www.automicvault.com/pkg/brew/libyubikey/) - Shares av.db curated category or tags: authentication, cli, security.
- [monkeysphere](https://www.automicvault.com/pkg/brew/monkeysphere/) - Security-sensitive metadata or terminology overlaps. Shared terms: authentication, cli, openssl, openssl-3, security.

## Combined YAML source

View the package source record on GitHub. [combined/libjwt.yml](https://github.com/automic-vault/db/blob/main/combined/libjwt.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
