How to use JWT Validator
- Paste the JWT you need to validate into the input box.
- Set HMAC secret (optional, HS256) so the output fits your use case.
- Press Validate and JWT Validator shows the result straight away.
- Finish by choosing Copy to take the output with you.
About this tool
There is no server behind JWT Validator. JWT Validator splits and base64url-decodes a JWT locally so you can inspect its claims.
Signature verification that needs a secret should be done in a trusted environment; JWT Validator focuses on decoding. It behaves the same on desktop and mobile, with nothing stored remotely.
Frequently asked questions
What does JWT Validator do?
Use JWT Validator to validate your input without installing anything using the HMAC secret (optional, HS256) control; everything happens client-side.
Is JWT Validator free to use?
Yes — JWT Validator is completely free, with no usage limits.
Is my input private in JWT Validator?
Yes — your input never leaves your device; JWT Validator does all the work in your browser.
Does JWT Validator verify the JWT signature?
JWT Validator decodes the token locally so you can inspect its header and payload; verification needs the matching key.
Does JWT Validator work offline?
Once the page has loaded, JWT Validator keeps working with no network connection.