English

JWT Debugger

Securely decode, verify, and edit JWTs locally in your browser.

Google AdSense Area

Key Features

  • 100% Local Processing: Data is processed securely in your browser without server uploads.
  • Base64Url Normalization: Accurately decodes multi-byte characters preventing garbled text.
  • Real-time Validation: Automatically checks expiration (exp) and visualizes security risks.
  • Two-way Editing: Edit the JSON payload to instantly re-encode into a new JWT in real-time.
  • Signature Verification: Verify that the token has not been tampered with by entering a secret key (HMAC) or public key (RSA) locally.
  • URL Parameter Integration: Pass a JWT via URL parameters (e.g., ?token=...) to directly open the decoded state from external tools.