JWT Decoder

Decoding happens entirely in your browser — the token never leaves this page. Signature verification is optional and only supports the HMAC algorithms (HS256/384/512) using a shared secret you provide; RSA/EC (RS256, ES256, ...) tokens can be decoded but not verified here, since that needs the issuer's public key.