JWT Decoder & Verifier
Decode JWT headers and claims, then verify a token with your key and claim settings. Inspect results locally; remote JWKS requires an explicit HTTPS request.
Decode JWT headers and claims, then verify a token with your key and claim settings. Inspect results locally; remote JWKS requires an explicit HTTPS request.
- Prepare your input
Choose the relevant options using the controls below.
- Run your task
Adjust the controls below and inspect the preview.
- Use the result
Check the result, then use the available copy or download controls.
Keys & Actions
Token Input & Status
Decoding reads the header and payload; it does not verify the signature. Verification uses your selected key and configured claims. This is a debugging tool, not an authorization decision.
Decoded Details
Not verified
Keys & Actions
Verification & Decryption
Verification
Decryption
Remote JWKS
Utilities
Base64Url
PEM ↔ JWK
JWT Decoder & Verifier
Inspect a JWT while debugging authentication: read header fields such as alg and kid, inspect claims such as sub and exp, then check the signature using a key you select. Decoding reveals data but does not establish that the token is trustworthy. Verification and application authorization are separate decisions.
Use the key and claim options that match your test scenario. Remote JWKS retrieval makes an explicit HTTPS request; ordinary token and key processing happens in the browser and is not saved automatically. Sharing includes the token in the link, so anyone receiving that link can read it. Use test tokens without production secrets for examples and inspect the verification status before interpreting decoded claims.
Features
- Read JWT header and payload data, with token structure and timeline information.
- Verify with a selected key and configured claim checks.
- Inspect verification diagnostics and copy or export decoded data.
- Use remote JWKS explicitly; shared links include the token itself.
How to use
- Paste a test token in the token input. Inspect its decoded header and payload.
- Select the verification key source and the claim settings relevant to your test.
- Run verification and read the signature status and diagnostics separately from the decoded values.
- Copy or export the data you need. Check the token contents before creating a shared link.