HomeSkillsDeveloper ToolsAbout

JWT Decoder / Encoder

Decode JSON Web Tokens and inspect claims, or encode new tokens with a secret key using HS256/HS384/HS512.

Tools run in your browser. Shared links may include your input; check the URL before sharing.

How to use

  1. Paste a JWT to read its header and payload.
  2. Compare alg, iss, aud and exp with your application's expectations.

This example illustrates one supported operation. Choose the matching mode and settings above; generated values and formatting may vary.

Example input or settings

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjMifQ.example

Example result

Header: {"alg":"HS256","typ":"JWT"}
Payload: {"sub":"123"}

Does decoding verify the signature?

No. Verify with a trusted key and validate the issuer, audience and expiry before trusting a token.

Reading a JWT does not verify its signature or establish that it is trustworthy. Use the issuer and a trusted verification library to validate it.