JWT Debugger

Decode or encode a JSON Web Token — paste a token to inspect header / payload / signature with security notes (alg=none, expired, weak HMAC), or build a fresh token by signing your own header + payload with HS / RS / PS / ES algorithms.

Verify signature (optional)

Paste a token above to see the decoded header, payload, and signature.