Decoding reads token contents but does not verify its signature, issuer, audience, or trustworthiness. Optional signature verification and HS256 signing run locally. Do not paste production secrets or private keys into tools you do not control.
JWT token
Decoding updates automatically as you type. The signature is not verified.
Time claims
Signature verification
Optional. The algorithm is detected from the token header. Verification supports HS256/384/512, RS256/384/512, PS256/384/512, and ES256/384/512.
How it works
Your browser performs the operation locally. Inputs and results are not sent to OneClickWorks.
Common questions
Does this tool upload my input?
No. Processing happens in this browser tab and your input is not sent to OneClickWorks.
What happens when I leave the page?
In-memory input and generated download links are released when the page is reset, replaced, or closed. OneClickWorks does not persist tool content.