Developer tools / Security

JWT Debugger

Inspect a token’s header and claims without sending it anywhere.

Decoding does not verify the signature. Do not treat decoded claims as trusted.

Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "utility-user",
  "role": "developer",
  "iat": 1700000000
}

Signature

demo-signature