JWT Debugger

Decode and verify JSON Web Tokens instantly and securely.

Header


                    

Payload


                    

Signature


                    
Enter a token to begin

How to Debug a JWT

1. Paste Token

Paste your full JWT into the 'Encoded Token' field. The header and payload will be decoded instantly.

2. Add Key

To verify the signature, paste your secret or PEM-encoded public key into the second field.

3. Check Status

The tool will immediately attempt to verify the signature and display whether it's valid, invalid, or expired.

Related Developer Tools

Frequently Asked Questions

What is a JWT (JSON Web Token)?

A JWT is a compact, URL-safe means of representing claims to be transferred between two parties. The claims are encoded as a JSON object that is used as the payload of a JSON Web Signature (JWS) structure, enabling the claims to be digitally signed or integrity protected. It consists of three parts separated by dots: Header, Payload, and Signature.

Is it safe to paste my JWT and secret key here?

Yes, absolutely. This tool is 100% client-side. All decoding and verification happen in your browser using JavaScript. Your token and secret key are never sent to our servers, ensuring your sensitive data remains completely private and secure on your own computer.