JWT Debugger
Paste a JWT token above and click "Decode & Verify"
Supports HMAC-SHA256 signature verification
About
Decode, verify, and debug JSON Web Tokens (JWTs). Paste your JWT to decode its header and payload, check expiration status against the current time, and verify cryptographic signatures using a shared secret key. Supports HMAC-SHA256 signature verification directly in your browser.
A JWT consists of three base64url-encoded parts: header (algorithm & type), payload (claims like exp, sub, iss), and signature. Enter the token to decode all parts. Optionally provide a secret key to verify the HMAC-SHA256 signature. Expiration claims are automatically checked against your system clock.
Part of the FreeQ.One tools suite.