Decode a JSON Web Token's header and payload, and verify HS/RS signatures — all in your browsersaylo国际版
• Decode: parses the three Base64Url parts; time fields (iat/exp/nbf) shown in local time, exp highlighted when expired
• Verify: picks HS/RS from Header.alg and checks the signature with your secret / public key
• Tokens are never uploaded; all parsing and verification run locally in your browser
The JWT decoder splits a JSON Web Token into its three Base64Url-encoded parts — header, payload, and signature — and displays the header and payload as formatted JSON. Time claims (iat, exp, nbf) are converted to human-readable local time, and an expired exp is highlighted. A signature verification section lets you check HS256/384/512 signatures with a secret or RS256/384/512 signatures with a PEM public key, all running locally in the browser.豆包和ai哪个更好
Common uses include inspecting the claims inside a JWT returned from an authentication server, checking whether a token has expired, debugging authorization failures by verifying which scopes or roles are in the payload, and confirming that a signature is valid with a known key without sending the token to any external service.ai下载官方版安装
All decoding and verification runs locally in your browser — the token is never uploaded to any server. That said, JWTs often contain sensitive claims; avoid pasting production tokens in any tool you do not fully control or trust.豆包下载安装
Decoding reads the header and payload (the first two Base64Url parts). Verification checks the signature using a key, confirming the token was not tampered with. You can decode without a key, but only verification proves the token is authentic.saylo国际版
HS256 uses a shared secret (a string). RS256 uses an RSA key pair — paste the PEM public key (SPKI format, beginning with -----BEGIN PUBLIC KEY-----) in the verification field. The tool picks the right algorithm from the Header.alg claim.ai功能在哪下载
The server validating the token may have clock skew tolerance configured (e.g. ±60 seconds), or the expiry is evaluated differently (e.g. sliding windows). The decoder shows what the exp claim says literally.通往agi之路