Those Boring Tools
Security ToolsPrivate by design

JWT Signature Verifier (HS256)

Enter a JWT and its secret to verify the signature is valid, computed entirely in your browser.

How to use this tool

  1. 1Paste the JWT.
  2. 2Enter the secret key.
  3. 3See whether the signature is valid, and the decoded payload.

Frequently asked questions

Does this support RS256 tokens?+

No — this only verifies HS256 (shared-secret) tokens. RS256/ES256 use asymmetric key pairs, a different verification process this tool doesn't implement.

Keep the boring tools boring.

If this saved you five minutes of nonsense, you can help keep the free tools running.

Buy the toolbox a coffee