Decode, verify, and inspect JWT headers, payloads, and claims with local secret or public key without sending data to servers.
Controls the raw token (paste or edit) setting for JSON Web Token (JWT) Debugger & Signature Verifier in real time.
Controls the algorithm setting for JSON Web Token (JWT) Debugger & Signature Verifier in real time.
Controls the token lifetime (exp) setting for JSON Web Token (JWT) Debugger & Signature Verifier in real time.
Controls the subject (sub) setting for JSON Web Token (JWT) Debugger & Signature Verifier in real time.
Controls the issuer (iss) setting for JSON Web Token (JWT) Debugger & Signature Verifier in real time.
Unix timestamp after which this token MUST NOT be accepted
Unix timestamp before which this token MUST NOT be processed
Unix timestamp recording exactly when this token was minted
Verify that your raw token (paste or edit) matches the expected multiline text format. Load a built-in sample preset to compare structural formatting.
Check the algorithm setting in JSON Web Token (JWT) Debugger & Signature Verifier to ensure encoding, precision, or specification version matches your target runtime.
Quickly craft standard tokens with customizable claims and sign them using HMAC in-browser.
Everything you need to know about RFC 7519, Base64URL encoding, cryptographic hashing, and safe client-side debugging.
All Tools • JWT Decoder • Regex Tester
Intended recipient(s) or API services accepting this token
Evaluate password strength using information entropy math and zxcvbn heuristic estimation with zero network transmission.
Encrypt and decrypt strings and files using modern AES-GCM 256-bit cryptography powered by the native browser Web Crypto API.
Decode and inspect TLS/SSL certificates, examining SANs, expiration dates, issuer hierarchies, and public key fingerprints.
Encode and decode raw byte strings to Base58 and Base58Check formats used in Bitcoin, IPFS, and Solana.
Generate bcrypt password hashes with custom salt rounds and verify candidate passwords against existing hashes locally.
Calcule e valide códigos de autenticação de mensagens RFC 2104 (HMAC-SHA256, HMAC-SHA512, HMAC-SHA1, HMAC-MD5) com verificação em tempo constante (Timing-Safe) no navegador.