JWT Decoder & Verifier
JWT Decoder & VerifierDecode JWT header/payload and verify the HS256 signature. Fast, free and secure — works in your browser. By AK Computer, Dwarka.
Processing...
How to use
- 1 Paste your JWT into the input field to instantly split it into header, payload and signature.
- 2 Read the decoded header and payload claims shown as formatted JSON.
- 3 Optionally enter the HS256 secret to verify the signature is valid.
- 4 Check expiry (exp) and issued-at (iat) claims to confirm the token is still current.
Frequently Asked Questions
Is it safe to decode my JWT here?
Yes, decoding happens entirely in your browser and the token is never sent to any server.
Can it verify the token signature?
Yes, provide the HS256 shared secret and the tool will confirm whether the signature is valid.
Does decoding a JWT reveal the secret?
No, the payload is only Base64URL encoded not encrypted, but the signing secret is never exposed by decoding.