JWT Validator
Verify HS256 and RS256 signatures and validate exp, nbf, aud and iss claims
About this tool
Decoding a JWT shows claims but does not prove the token is trustworthy. Signature verification confirms the issuer signed the token, and time claims (exp, nbf) plus aud/iss checks catch misconfiguration early.
Paste a token, supply HS256 secret or RS256 public key, and optionally validate audience and issuer. Results show per-claim badges alongside the payload JSON. Use with JWT Decoder for inspection.
How to use
Paste JWT
Paste the Bearer token or cookie value.
Verify signature
Enter HMAC secret or RSA public key PEM.
Check claims
Review exp, nbf, aud and iss validation badges.
Use cases
API integration tests
Confirm tokens from auth service match expected aud/iss before shipping.
Incident response
Verify whether a leaked token is still valid and correctly signed.
Frequently asked questions
Related guides
Related tools
LLM Token Counter
Visualize BPE tokens with color blocks, model selector, and per-request cost estimate
SSH Key Pair Generator
Generate RSA, ECDSA P-256 or Ed25519 SSH key pairs with OpenSSH public format and SHA256 fingerprint
Kubernetes Resource Calculator
Estimate CPU and memory requests, limits and HPA settings with downloadable YAML manifests
CSV Data Viewer
Paste CSV and browse rows in a sortable table with delimiter detection
Multiple URL Opener
Open many URLs in new tabs with a configurable delay between each
API Mock Server
Define mock REST routes and intercept fetch calls client-side