Read the token
Extract a token from common pasted forms and view its header, payload, and claims in a readable layout.
← All workbenches
JWT
Read a JWT before you trust it.
Paste a raw token, a Bearer value, or a curl command. Read the claims and time values first, then verify or create a supported signature in Pro.
Download for Mac
Free download. Requires macOS 14 or later.
WHAT IT HELPS WITH
See what a token says and what still needs proof.
Check time and security details
Review expiry and other time-based values, security warnings, and the result of an expected-algorithm check.
Verify or create
In Pro, verify HMAC or RSA signatures and build a signed token from claims you control.
CLEAR RESULTS
Decoding and verification answer different questions.
Anyone can decode the readable parts of a JWT. Verification checks whether the signature matches the HMAC secret or RSA key you supplied.
A verified signature does not decide whether your application should authorize a request. The claims and your own rules still matter.
DecodeRead header, payload, and claims
InspectReview time and security details
VerifyCheck a supported signature in Pro
ACCESS
Read any token. Verify or create one when you need to.
FREE — INCLUDED
Decode and inspect your own tokens.
- Extract and read the header and payload
- Inspect claims, dates, and security warnings
- Check the expected algorithm
PRO — ADDS
Verify signatures and create tokens.
- Verify supported HMAC and RSA signatures
- Create and sign tokens
- Move decoded claims into Encode and use numeric-date helpers
LOCAL BY DEFAULT
Your tokens and keys stay on your Mac.
Tokens, claims, secrets, and keys are session-only and are not stored by Dev Workbench. JWT does not send this material to a KeLoc server or make a network request.
Read the Dev Workbench privacy policy