← All tools
JWT Claims Validator
Decode a compact JWT, apply claim-policy checks, and optionally verify an HS256 signature entirely in your browser.
Token and policy
Exactly three unpadded Base64url segments, up to 64 KiB.
Time checks
Leave blank to use the current time.
Expected claims
Matches a string or one item in an array.
Comma-separated JSON member names.
Optional HS256 verification
Only use a key you are authorized to handle. It stays in this page and is never saved or sent. An empty field skips verification.
Validation results
- Paste a token to begin.
Decoded header
—
Decoded claims
—