JWT Decoder & Secret Generator
Decode JSON Web Tokens instantly to inspect payloads and headers, and generate cryptographically secure signing secrets.
Token Composition
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c3JfOTQ4MmY3MWEiLCJuYW1lIjoiQWxleCBNZXJjZXIiLCJlbWFpbCI6ImFsZXhAYWdlbnR4YWxwaGEuY29tIiwicm9sZSI6ImFkbWluIiwicGVybWlzc2lvbnMiOlsidXNlcnM6cmVhZGFsbCIsInVzZXJzOndyaXRlIiwiYXBpOmFjY2VzcyJdLCJpYXQiOjE3MjcwMDAwMDAsImV4cCI6MjUyNDYwODAwMH0.2WpIqG9J1U_xQZlVj-7mRj4F8BwPn6z3HlD4t0uKnEw// Waiting for token...
// Waiting for claims...
// Waiting for signature...
Cryptographic Secret Generator
Generate secure random keys with high entropy to sign HS256, HS384, or HS512 JWTs.
100% Client-Side Privacy
Your JWT tokens and session credentials never leave your browser. All parsing and HMAC calculations run on-device.
Automated Expiry Checks
Instantly see whether your authentication token is active or expired, with human-readable relative time and exact UTC timestamps.
HMAC Signature Verification
Simulate signature validation using Web Crypto API to guarantee that your signing keys correctly generate authentic tokens.
Frequently Asked Questions
Is JWT Decoder & Secret Generator free to use?
How does JWT Decoder & Secret Generator protect my privacy and data?
Does JWT Decoder & Secret Generator work on mobile devices?
What are the main features of JWT Decoder & Secret Generator?
More Security & Privacy Utilities
CSP Generator
Build Content Security Policy headers visually with toggleable directives and sources.
Password Generator
Generate cryptographically secure passwords with customizable length, character sets, and strength meter. Create up to 10 at once.
Security Scanner
Scan any website for security misconfigurations. Checks 12 security headers and gives an A+ to F grade.