Dekodieren und prüfen Sie JWTs, verifizieren Sie HMAC-Signaturen und erzeugen Sie Test-Tokens lokal im Browser.
Inspect a token to view its header.
Inspect a token to view its payload.
The secret is used only by your browser's cryptography API. This verifier supports HS256, HS384, and HS512; it does not send the token or secret to KivTools.
Generate only HS256, HS384, or HS512 tokens. The payload and secret stay in your browser's Web Crypto API; this tool never offers alg: none.
Generate a local HMAC JWT to view it here.
Decoded claims are readable Base64URL data, not proof that a token is trusted. Check its algorithm, expiry, intended issuer and audience, then verify its signature with a trusted key or secret before accepting it in an application.