JWT Verifier
Decode and verify JWT tokens without verification.
Header
Payload
Signature
Claims Analysis
Issuer (iss)
Subject (sub)
Audience (aud)
Expires (exp)
Issued At (iat)
Not Before (nbf)
JWT ID (jti)
Algorithm
Token Status
Parts:
Expired:
Not Yet Valid:
About the JWT Verifier
The JWT verifier checks a token’s signature with your secret key, which proves the token was issued by someone who knows the key and has not been changed.
How to use it
- 1 Paste the JWT.
- 2 Enter the secret used to sign it.
- 3 See whether the signature is valid and the token is still in date.
Frequently asked questions
Why does verification fail?
Usually the secret is wrong, has extra spaces, or is Base64-encoded when it should not be, or the token was changed after signing.
Can a valid signature still be rejected?
Yes. Servers also check the expiry (exp), not-before (nbf), audience (aud), and issuer (iss) claims.
Is my secret sent anywhere?
Verification runs in your browser. Even so, avoid pasting production secrets into any online tool.