JWT verifier

Go beyond decoding: check that a token's signature is valid for your key, and that its claims are in date. The token and key stay on this page.

Token Key Key or secret

Expected issuer (optional)Expected audience (optional)

Header

Payload

A valid signature proves the token was made with that key. It does not prove the token is safe to trust: always check issuer, audience and expiry in your own code, and never accept the "none" algorithm.