JWT Decoder / Encoder
Paste any JWT to decode header and payload, see claim explanations, and verify (HS256 or RS256) or encode tokens. All processing happens in your browser – nothing is sent to a server.
Decode & Inspect
View token header & payload with syntax-highlighted JSON and claim expiry countdown – perfect for quick debugging.
Encode & Sign
Build a header & payload, supply a secret, and generate a HS256-signed JWT in one click.
Verify Signature
Confirm a token's integrity by validating its signature against your secret key – get instant pass/fail feedback.
Why use this JWT tool?
- Client-side only: All encoding/decoding happens in your browser – your tokens and secrets never leave your device.
- Live expiry countdown: See how long until a token expires based on the
expclaim (if present). - Instant validation: Invalid structure or malformed Base64 parts are detected and surfaced immediately.
- Copy & share: Quick copy buttons on every section let you share tokens or JSON fragments with teammates.
- Optional save in browser: Your last token and decoded header/payload are saved in your browser and restored when you return.
- Open-source & auditable: Explore the code on GitHub and verify there's no hidden network requests.
⭐ Rate this tool
Your feedback helps us improve
🔄 Workflow Suggestion
Try combining multiple tools for a complete workflow. For example: Notepad → Text Encryption → Save to Cloud or Date Calculator → Calendar → Countdown Timer
Related Tools & Recommendations
💡 You might also need
Base64 Encode/Decode
Convert text to Base64 format and decode Base64 strings
JSON Formatter & Validator
Format, validate, and minify JSON data with syntax highlighting and error detection
YAML ⇄ JSON Converter
Convert between YAML and JSON formats with validation and formatting
📁 More Security Tools Tools
Password Generator
Generate secure, random passwords with customizable length, character types, and strength indicators
JWT JWKS Inspector
Decode JWT, inspect claims, and verify RS256-family signatures against JWKS keys using kid matching. Client-side only.
HMAC Signature Generator
Generate and compare HMAC signatures for webhook and API request debugging. Supports SHA-256, SHA-384, and SHA-512 with hex or base64 output.
Send Feedback
We'd love to hear your thoughts! Your feedback helps us improve our tools and create a better experience for everyone.
Share Your Experience
Tell us what you think about this tool