Paste your JSON Web Token (JWT) into the input field. JWTs have three parts separated by dots: header.payload.signature.
The tool automatically decodes the header and payload, displaying them as formatted JSON. The signature is shown separately.
3Verify signature (optional)
Enter your HS256 secret key and click "Verify HS256" to check if the token signature is valid.
See verification status: valid (green), invalid (red), or not available (amber). Decoding does not validate the token—only verification confirms authenticity.
Click "Clear" to reset all fields and start with a new token.