← All tools

JWT Claims Validator

Decode a compact JWT, apply claim-policy checks, and optionally verify an HS256 signature entirely in your browser.

Token and policy

Exactly three unpadded Base64url segments, up to 64 KiB.

Time checks

Leave blank to use the current time.

Expected claims

Matches a string or one item in an array.
Comma-separated JSON member names.

Optional HS256 verification

Only use a key you are authorized to handle. It stays in this page and is never saved or sent. An empty field skips verification.

Validation results

  • Paste a token to begin.

Decoded header

Decoded claims