JWT Debugger / Tool

Decode / Validate JWT

JWT Token

Secret Key (HMAC)

Enter base64 encoded secret OR plain text. Required for signature validation/encoding. WARNING: Do not use production secrets here!

Encode (Create JWT)

Security Warning: Encoding (signing) JWTs requires a secret key. This should almost always be done on a secure backend server, not in the browser where the key could be exposed. This tool is for demonstration purposes only.

Payload (JSON)

Secret Key (HMAC)

Enter base64 encoded secret OR plain text. Required for signing. Use the same secret as for validation if applicable.