Security
JWT Inspector Pro
Decode, verify, generate, compare, audit, and timeline JWTs locally in the browser.
Client-side only
Processing is local to this browser. DevPaste does not upload pasted content, JWTs, .env values, editor contents, or HMAC secrets to a server.
JWT Input
Everything runs locally in your browser. Your token and keys are not uploaded.
Decoding a JWT does not verify its signature.
Paste a JWT or choose a sample token.
The token will be decoded locally without verifying its signature.