Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Free tool
Decode and inspect any JSON Web Token, verify its signature, or build and sign a new one, all client-side. Nothing you paste here is ever sent to our servers.
Everything happens in your browser via the Web Crypto API, the token, secret, or key you enter here is never sent to our servers.
By using this tool, you agree to our Terms of Service , only run it against something you own or are authorized to assess.
Token handling is a common source of real vulnerabilities, weak secrets, algorithm confusion, missing expiry checks. Talk to us about a review.