GuestGUEST
Loading…
Your files never leave your device. All processing happens locally in your browser — nothing is uploaded to our servers.Files are never stored on our servers · No tracking of your file contentsPrivacy Policy
All ToolsVerify & Decode JWT
Verify & Decode JWT
Decode JWT tokens to inspect header and payload. Optionally verify HS256 signatures with a secret key.
What is Verify & Decode JWT?
Verify & Decode JWT is a free online tool that decodes and inspects JSON Web Tokens. See the decoded header, payload, and signature in a color-coded view. Optionally verify the signature using a secret key (HS256).
How It Works
The tool splits the JWT at the dots and Base64URL-decodes the header and payload. The expiry (exp) claim is checked against the current time. For optional HS256 verification, the tool uses SubtleCrypto to compute the expected signature and compares it byte-by-byte.
How to Use
- 1
Paste your JWT
Paste the full JWT token (header.payload.signature) into the token field.
- 2
Enter the secret or public key
Provide the HMAC secret or public key used to sign the token for signature verification.
- 3
Verify
Click "Verify". The tool validates the signature, checks expiry (exp), and shows all decoded claims.
- 4
Review decoded payload
Inspect the header and payload sections to read all claims, issue time, and expiry time.
Who Uses This Tool
🔍
Debugging Auth Issues
Paste a JWT from a failing request to instantly see its claims and verify whether the token has expired.
🧪
Testing Token Contents
Inspect the payload of tokens generated by your auth server to confirm custom claims are included correctly.
🔐
Signature Verification
Confirm that a token was signed with the correct secret key before trusting its claims in a staging environment.
📚
Security Education
Demonstrate to developers that JWT payloads are readable without a secret to teach safe token handling practices.
⏰
Expiry Inspection
Check the exp claim and see a human-readable expiry time and validity status to diagnose session timeout bugs.
🛠️
Third-Party Token Audit
Decode tokens received from external OAuth providers to verify the structure matches your expected schema.
Why Choose This Tool
No Secret Required to Decode
Header and payload are decoded instantly from any JWT without needing the signing secret, for quick inspection.
Expiry Status Indicator
Displays a clear valid or expired badge based on the exp claim so you can diagnose session issues at a glance.
Optional Signature Verification
Provide the HMAC secret to verify the signature cryptographically and confirm the token was not tampered with.
Color-Coded Sections
Header, payload, and signature are each rendered in a distinct color for easy visual separation.
Formatted JSON Output
Decoded header and payload are pretty-printed as JSON so nested claims are easy to read and copy.
Completely Private
All decoding and verification runs in your browser — your token and secret never leave your device.
Key Benefits
- Decodes header and payload without any secret
- Shows expiry status: valid, expired, or no expiry
- Optional HS256 signature verification with secret
- Color-coded header, payload, and signature
- No data sent to any server
Frequently Asked Questions
Also Known As
jwt decoder online freedecode jwt token onlineverify jwt signature onlinejwt inspector browser baseddecode json web token payloadonline jwt viewer toolcheck jwt expiry onlinejwt verifier no login required
Related Tools
B
Binary To Decimal
Convert between binary, decimal, hex and octal number systems
C
Color Converter
Convert colors between HEX, RGB, and HSL formats
C
Convert Binary
Convert binary numbers to text and text to binary
C
Convert Timestamp
Convert Unix epoch timestamp to standard date format and back
C
Count Words
Count words, characters, sentences and paragraphs in text
C
Convert Datetime
Convert datetime between different formats and timezones
Trusted Worldwide
Free Online Document Tools for Everyone
iLoveDocsTools is used by students, professionals, and businesses across the United States, Canada, United Kingdom, Australia, India, and more than 100 other countries. All tools are browser-based and process files privately — your files never leave your device. Free to use, with Pro plans for unlimited access.
No Upload Required
All processing happens directly in your browser. Your documents are never sent to any server — complete privacy guaranteed for users in the USA, Canada, UK, and worldwide.
Free to Use — Pro Plans Available
Every tool on iLoveDocsTools is free to use. Need more? Upgrade to Pro for unlimited usage, priority access, and no daily limits. Trusted by students, freelancers, and teams across North America and Europe.
Works on Any Device
Whether you are on a Mac, Windows PC, iPhone, or Android in New York, Toronto, London, or Sydney — our tools work instantly in any modern browser.
Looking for free PDF tools in the USA? Free document converters in Canada? Online PDF editors in the UK or Australia? iLoveDocsTools offers 70+ free tools — merge PDF, split PDF, compress PDF, convert Word to PDF, Excel to PDF, JPG to PDF, and many more — all free, all instant, all private. No watermarks. No file size limits. Just free tools that work.