Signature verification
Verification is optional.
Decode result will appear here.
Header
Payload
Details
- Algorithm
- -
- Type
- -
- Subject
- -
- Issuer
- -
- Audience
- -
- Issued at
- -
- Not before
- -
- Expires
- -
- Time status
- -
Header JSON
Payload JSON
Encode supports unsigned tokens, HMAC secrets, and PEM PKCS#8 private keys.
Generated token
Signature
Supported features
- Decodes standard three-part JWT tokens locally.
- Displays header, payload, registered claims, and token time status.
- Verifies HMAC signatures with shared secrets: HS256, HS384, HS512.
- Verifies RSA public-key signatures with PEM public keys: RS256, RS384, RS512.
- Verifies RSA-PSS public-key signatures with PEM public keys: PS256, PS384, PS512.
- Verifies ECDSA public-key signatures with PEM public keys: ES256, ES384, ES512.
- Encodes unsigned tokens, HMAC-signed tokens, RSA/RSA-PSS-signed tokens, and ECDSA-signed tokens.
- Signs with HMAC secrets for HS256, HS384, HS512.
- Signs with PEM PKCS#8 private keys for RS256, RS384, RS512, PS256, PS384, PS512, ES256, ES384, ES512.
- Validates HMAC signing key length before encode: 256 bits for HS256, 384 bits for HS384, 512 bits for HS512.