JWT Generator & Decoder

Use this free online tool to quickly generate and decode JSON Web Tokens (JWT). JWTs are widely used to securely transmit information between parties as JSON objects, often for authentication and authorization in web applications.

• Generate JWTs: Provide your payload in JSON format, choose an algorithm (HS256, RS256, ES256, etc.), and sign it with a secret or private key. You can also set an expiration time.
• Decode JWTs: Paste an existing token to inspect its header and payload. You can choose to verify the signature with the correct secret/public key or simply decode without verification.

This tool helps developers test, debug, and understand how JWTs work in real-world scenarios. For more details, see the official specification: RFC 7519 – JSON Web Token (JWT)

Common JWT debugging tasks

• Generate signed test tokens for API clients, Drupal integrations, and local authentication flows.
• Decode a JWT header and payload to inspect claims such as issuer, audience, subject, issued-at, and expiration timestamps.
• Verify token signatures with a shared secret or a public key when testing HMAC, RSA, or ECDSA algorithms.
• Troubleshoot invalid token formats, expired tokens, and mismatched signing algorithms.

Privacy note: Submitted values are processed only to produce the requested result and are not stored by this tool.

Based on the firebase/php-jwt library.