PASETO (Platform-Agnostic Security Tokens) is a specification for secure stateless tokens designed as a less error-prone alternative to JWT. It uses versioned, well-defined cryptographic primitives to avoid algorithm-confusion and misuse.