JWT Decoder
Paste a JWT to see its header and payload, and optionally verify an HS256 signature.
Paste a JWT to see its header and payload, and optionally verify an HS256 signature.
Paste a JWT into the box - the decoded header and payload appear below, with exp/iat/nbf claims shown as human-readable dates. If the token uses HS256, a Verify section appears where you can enter the secret to check the signature.
It decodes them, but signature verification is HS256 only - the tool says so explicitly rather than silently doing nothing for other algorithms.
No. Decoding is just base64url + JSON.parse, and HS256 verification uses the browser's native SubtleCrypto - everything happens locally.
Standard JWT timestamp claims: expiration, issued-at, and not-before, all shown converted to readable dates instead of raw Unix timestamps.
28 visits