JWT Encoder/Decoder
Comments
What is JSON Web Token (JWT)?
JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. This information can be verified and trusted because it is digitally signed.
JWTs can be signed using a secret (with the HMAC algorithm) or a public/private key pair using RSA or ECDSA. A JWT consists of three parts separated by dots:
- Header: Contains the hashing algorithm (e.g., HS256, RS256).
- Payload: Contains the claims (e.g., user info, expiration).
- Signature: Used to verify that the message wasn't changed along the way.
How to use this tool?
Manage and debug your JWT tokens with ease:
- 1
Decode Tab: Paste your encoded token on the left to immediately see the header and payload on the right.
- 2
Verify Signature: Enter your secret or public key in the bottom-right section to check the token's validity.
- 3
Encode Tab: Customize your header and payload JSON in the textareas.
- 4
Select Algorithm: Choose from HMAC, RSA, or ECDSA algorithms in the dropdown.
- 5
Provide Key: Enter your secret or private key (use Sample Key for quick testing).
- 6
Generate: Click 'Encode JWT Token' to create your secure token instantly.