JWT Debugger

Decode or encode a JSON Web Token — paste a token to inspect header / payload / signature with security notes (alg=none, expired, weak HMAC), or build a fresh token by signing your own header + payload with HS / RS / PS / ES algorithms.

Algorithm is read from header.alg.

Edit the header and payload above to build a fresh token.