Typical use
Input
Paste an eyJ... tokenOutput
Shows the header and payload as formatted JSON.JWT Decoder and Verifier
Decode JWT headers and payloads, with optional HMAC-SHA256 signature verification.
Use this page to decode JWT headers and payloads and verify HMAC signatures. It focuses on a JWT string and optional secret and produces header, payload, and signature validation result.
How to use
- Prepare a JWT string and optional secret and paste, upload, or enter it as requested by the page.
- Adjust the available options, then run the process, conversion, generator, or lookup.
- Review header, payload, and signature validation result, then copy, download, or continue editing the result.
Examples
Privacy
Processed in browser
Input not stored
Review sensitive data
The input is mainly processed in your browser, and the page only uses browser capabilities needed to generate the result.
Frequently asked questions
Use a JWT string and optional secret as expected by this page. If validation fails, try a smaller sample and check encoding, separators, file type, or expression syntax.
The usual causes are input format issues, browser support, or option settings. Verify the workflow with the sample first, then replace it with your own data.
You can copy ordinary results, but review critical fields and edge cases before production use, official submission, financial calculation, or publication.
Share this tool
