Does this verify the signature?

No — verification requires your secret or public key. This tool shows the signature bytes but doesn't validate them.

Is my token uploaded anywhere?

No. Everything is decoded in your browser tab. Nothing is sent.

Standard three-segment JWTs (header.payload.signature) encoded with base64url. Signed and unsigned tokens both decode.

Developer Tools

Paste a JWT to see its header, payload, and signature side-by-side. Runs fully in your browser.

alg: HS256

Expired 5/27/2024, 9:03:42 PM

issued 5/20/2024, 9:03:42 PM

Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "1234567890",
  "name": "Jane Doe",
  "iat": 1716239022,
  "exp": 1716843822
}

Signature

dozjgNryP4J3jVmNHl0w5N_XgL0n3I9PlFUP0THsR8U

Hand-picked utilities you may find useful next.

Crop, resize, and reshape images right in your browser.

Inspect image dimensions and strip EXIF metadata locally.

Sample any pixel color from an uploaded image.

Loading…