JWT Inspector

JWT tooling for serious developers

The fast, private way to understand every token.

Decode JWTs, verify signatures, audit claims, compare environments, and generate keys in one focused workspace. Built for the moment authentication debugging cannot wait.

Instant JWT decode

See headers, claims, timestamps, and token structure without sending secrets to a server.

Security-minded verification

Check algorithms, issuer, audience, expiry, key selection, and meaningful security findings.

From prototype to production

Export policies and copy Node, Python, Java, Go, and .NET verification snippets.

Decoder

Encoded token

Verification key

Claim checks and the library snippets pin these. Empty iss/aud falls back to the current token, and the snippet still requires both. Leeway is clock skew only.
Tip: you can paste a JWKS or an OIDC discovery document here (paste-only, never fetched). The key is picked by the token's kid and every key in the set is audited. For a discovery document, paste the JWKS from its jwks_uri after it.
Paste a token

Verifier self-test

Builds sample tokens in this tab from the current payload and the key above. Nothing is sent anywhere. Paste a sample into your own verifier to see whether it rejects it.

No samples yet.

Header

Payload

Security findings
No token.