Skip to content
NewsAppiteVerified News · 24/7
News Appite Tools · 🚀 Advanced Tools

JWT Decoder & Verifier

Decode JSON Web Tokens, check expiry and verify HMAC signatures locally. A free News Appite utility, instant and private: no sign-up required.

✔ Updated 28 Sep 2026By the News Appite tools team100% free · no sign-up

Paste a token to decode it
    Header
    —
    Payload
    —
    Quick answer

    Decode JSON Web Tokens, check expiry and verify HMAC signatures locally. How it works: Paste the token. Read the decoded header, payload and time claims. Optionally enter the secret to verify an HS256/384/512 signature.

    About the JWT Decoder & Verifier

    JSON Web Tokens carry login and API claims as base64url-encoded JSON. Paste a token to read its header and payload, see whether it has expired, and — for HMAC-signed tokens — verify the signature with the shared secret using the browser's Web Crypto API.

    How to use the JWT Decoder & Verifier

    1. Paste the token.
    2. Read the decoded header, payload and time claims.
    3. Optionally enter the secret to verify an HS256/384/512 signature.

    Tips & benchmarks

    • Never paste production secrets into online tools you do not trust — this one runs locally, but the habit matters.

    Frequently asked questions

    Can it verify RS256 tokens?

    Not yet — RSA/ECDSA verification needs the public key; decoding still works for any algorithm.

    Can I decode a JSON Web Token online?

    Yes, you can use the JWT Decoder & Verifier tool to decode a JSON Web Token online. Simply paste the token into the tool to read its header and payload. The tool will also check if the token has expired.

    How do I verify the signature of a JSON Web Token?

    To verify the signature of a JSON Web Token, paste the token into the JWT Decoder & Verifier tool and optionally enter the shared secret. The tool will then verify the HMAC signature using the browser's Web Crypto API.

    Can I use the JWT Decoder & Verifier tool offline?

    Yes, since all processing happens in the visitor's browser, you can use the JWT Decoder & Verifier tool offline. However, you will need to have accessed the page at least once while connected to the internet to load the tool.

    What information can I retrieve from a decoded JSON Web Token?

    When you decode a JSON Web Token using the JWT Decoder & Verifier tool, you can retrieve the decoded header, payload, and time claims. This includes information about the token's expiry and other login and API claims carried by the token.

    • jwt decoder online
    • jwt decoder and encoder
    • jwt decoder fusionauth docs
    • jwt decoder flutter
    • jwt decoder github
    • jwt decoder cli
    • jwt decoder offline
    • jwt decoder python
    • jwt decode verify signature
    • jwt decode verify

    All tools on News Appite are free to use for personal and commercial work. Calculations and file conversions are performed in your browser; the redirect and cache checkers make a single request to the URL you enter and store nothing. Found a bug or want a new tool? Tell us.