What is JWT Encoder & Verifier?
Decode a JWT's header and payload and show its expiry (exp) and issued-at (iat) times in readable form, then verify the signature with a secret (HS256/384/512) or a public key (RS256 and more). You can also create new tokens with a secret.
How to use
- 1
Paste the token to verify, or switch to the “Create” tab.
- 2
Enter the secret (or public key) needed to verify the signature.
- 3
Check the result and expiry status.
Use cases
Debugging API auth
Check whether a token has expired when requests are rejected.
Issuing test tokens
Create test tokens with a development secret.
FAQ
Can I paste a production secret?+
It never leaves your browser, but we still recommend not entering production secrets whenever possible.