Skip to content
Ciberkit
Sign in

JWT decoder

Free

Read, verify the signature (HS, RS, ES, EdDSA) and detect alg none, weak secrets and endless tokens.

Paste a JWT (eyJ…). It's decoded in your browser: it's sent nowhere.