JWT Decoder & Verifier

Paste a JWT to see its decoded header, payload, and expiry status. Optionally verify its signature with a secret (HMAC) or public key (RSA/ECDSA).

Everything on this page runs entirely in your browser. The token, any secret, and any key you paste are never sent to a server — decoding and verification happen locally via WebAssembly.