JWT Claims Token Decoder

Decode JWT header and payload, check expiry, and verify HS256/384/512 signatures locally.

Why use this tool?

Decode a JSON Web Token to inspect its header and claims, see whether it has expired, and verify HMAC (HS256/384/512) signatures with your secret - all in your browser.

How to use it

1. Paste the JWT.
2. Review the header, payload and expiry.
3. Optionally enter the secret to verify the signature.