JWT Decoder
Decode JWT header, payload, and expiry—including Bearer tokens—on your device.
- On your device
- No signup
Private on your device
Your information stays on your device and is not uploaded.
Decode JWT header, payload, and expiry—including Bearer tokens—on your device.
Encode and sign JWTs with HS256 on your device.
Generate sample JWTs with common claims.
Generate SHA-256, SHA-384, and SHA-512 hashes.
Generate HMAC-SHA256, SHA384, and SHA512 digests locally.
Format, minify, and validate JSON with optional key sorting.
Compare two JSON documents and list structural differences.
Format, minify, and validate XML with readable indentation.
Paste a JWT and provide the matching HMAC secret or PEM public key to verify its signature on your device. Supports HS256/384/512, RS256/384/512, and ES256 with clear success or failure messaging. Decoding alone does not prove authenticity—this tool verifies signatures locally with no server calls.
Open the JWT Verifier form on this page, enter the values or file required for your task, and run the tool. Review the results panel and adjust inputs as needed. Your data stays on your device and is not uploaded.
Paste a JWT and provide the matching HMAC secret or PEM public key. Signature verification uses WebCrypto locally—HS256/384/512, RS256/384/512, and ES256 are supported. Decoding alone does not prove authenticity.
Results are based on the inputs you provide and may not cover every edge case. This tool is for general use and is not professional advice.
Your data stays on your device and is not uploaded.
FAQ
Yes. It is free to use and you do not need to sign in or create an account.
See the privacy note on this page. Many tools run on your device; some heavier file tools may use secure temporary processing when required.
Yes. Open this page on your phone or tablet, enter your inputs, and use the on-screen controls.
Page last reviewed: