Generate a local HMAC token
For local development and testing; the generated token is loaded above and can be verified immediately.
HS256 requires at least 32 UTF-8 bytes.
{
"alg": "HS256",
"typ": "JWT"
}{
"sub": "1234567890",
"name": "John Doe",
"iat": 1516239022
}| Claim | Unix | ISO 8601 | Status |
|---|---|---|---|
| iat | 1516239022 | 2018-01-18T01:30:22.000Z | Issued-at time is valid |
Claim rules
Leave issuer or audience blank to skip matching; time claims are always checked.
Claims satisfy the current rules
Verify signature
Algorithm: HS256. Supports HS, RS, PS and ES 256/384/512 families; JWKS keys are selected by kid.
Decoding does not establish trust. Accept a JWT only after its signature verifies and exp, nbf, iss, aud and other claims satisfy your application rules. Everything is processed locally.
About JWT Debugger, Decoder & Verifier
Generate local HMAC test tokens, strictly validate JWT claims, and verify signatures with HMAC, PEM, JWK, or JWKS keys.
No installation is required and input is not permanently stored. Encoding, formatting, image and QR tools run locally in your browser; only network lookups connect to their respective services.