JWT Encoder / Decoder

Build, inspect, and verify JSON Web Tokens — entirely in your browser

Header

base64url

Payload

base64url

Secret

HMAC-SHA256

Only HS256 supported. Secret never leaves your browser.

Encoded Token

Fill in the fields to generate a token.

JWT payloads are not encrypted — only base64url encoded. Anyone can read the payload. Only use JWTs to transmit non-sensitive data or over HTTPS.