Skip to main content
DevToys
Encode & decode

JWT verifier

Verify JWT signatures and standard claims

Tokens and keys are not stored. Never enter a private key.

How to use / Notes

How to use

  1. Paste a JWT into the input.
  2. The header, payload and standard claims (exp/iat, etc.) are decoded.
  3. Enter the secret or public key to verify the signature.

Notes

  • Verification runs in the browser; tokens and keys are never sent anywhere.
  • Do not paste production secrets on a shared machine.
  • JWT payloads are not encrypted—anyone can read their contents.