JWT Inspector

Decode a JSON Web Token, read its claims and expiry, and verify HS256/HS384/HS512 signatures with your secret.

How to use JWT Inspector

1. Paste the JWT.
2. Read the decoded header, payload and expiry time.
3. Enter the secret to verify the signature.

Frequently asked questions

Is it safe to paste a token here?

Decoding and verification run entirely in your browser; the token is not sent anywhere.

Which algorithms can be verified?

HMAC algorithms HS256, HS384 and HS512.