Is it safe to paste my JWT here?

Yes, our JWT decoder works 100% locally in your browser. Your sensitive tokens are never sent to any server.

Can I verify a JWT signature?

You can inspect the header and payload of any JWT. Signature verification requires the secret key which you optionally provide locally.

Decode and inspect the header and payload of any JSON Web Token.

Alg / Claims—0

Cipher Size0B

Encoded Source

Safe Local Decoding

Internal Metadata

TokenTypeJWT

ExpirationNo Expiry

Decoding is purely informational. Signature verification is not performed in this browser-only view.

Decoded Output

Algorithm & Token Type

/* Token header will appear here */

Data (Claims)

/* Claims data will appear here */

HMAC / RSA Verification

/* Signature segment */