JWT Decoder

Decode a JWT's header and payload, check expiry and verify HMAC signatures.

The token and secret are processed only in your browser and never sent anywhere.

JWT token

Header

Payload

Verify signature (HS256 / HS384 / HS512)

Secret is base64url encoded