JWT Claims Inspector
Decode JWT claims and verify nine HMAC, RSA, or ECDSA signatures locally without uploading your token or key.
Decode and verify locally. Your token and key stay in this browser.
Use a disposable test token. Do not paste a production bearer token.
Verify signature
Supported algorithms: HS256, HS384, HS512, RS256, RS384, RS512, ES256, ES384, ES512
A valid signature does not prove expiry, issuer, audience, authorization, or safety.
Output
Load the test sample or paste a disposable token. Decoding is not verification.
How to use this tool
{"alg":"HS256","typ":"JWT"}
{"sub":"g3n-demo","iat":1700000000,"exp":2000000000}Load the disposable sample to see this decoded header and payload. Keep HS256 and UTF-8 for the supplied demo key, then select Verify signature. Changing the key causes verification to fail. Your application must still check expiry, issuer, audience and permissions before accepting a token.
Inspect Base64 encoding separately →
Usage notes updated: JSON Web Token — RFC 7519 ↗
When not to use it
Do not paste a production bearer token or treat decoded claims as verified authorization.
Read the guide →