JWT debugger

Decode JSON Web Tokens, verify signatures and create your own tokens – according to RFC 7519.
  • Free
  • No sign-up
  • Your data stays on your device

Tokens are credentials. They are processed only in your browser; nothing is transmitted and no keys are fetched from the internet.

    A leading "Bearer " is removed automatically. The colours show header, payload and signature.

    Header
    Payload
    Verify signature Algorithm: –

    How it works

    1. Paste a token

      Header and payload become readable instantly, timestamps as dates with a note whether the token has expired.

    2. Verify the signature

      With the secret or the public key you can see whether the token is genuine and unmodified.

    3. Create tokens

      In the encoder you build your own test tokens with HMAC, RSA, ECDSA or EdDSA.