JWT & JWE Debugger — Decode, Verify, Encrypt & Decrypt | Authgear

JWT & JWE Debugger

Decode, verify, sign, encrypt, and decrypt JSON Web Tokens. Our JWT debugger helps you inspect JWT headers and claims, verify signatures, and convert tokens to/from encrypted JWE form.

JWT Example:

Generate JWT Token

✓ Valid JWT
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1aWRfMTIzNDUiLCJuYW1lIjoiSm9obiBEb2UiLCJpYXQiOjE3OTMwODY1NzIsImV4cCI6MTc5MzA5MDE3Mn0.iN0NjOWXKC9_C3KvVaENjzq_PCYxT-4_6BVQRV5bMZg

Decoded Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Decoded Payload

{
  "sub": "uid_12345",
  "name": "John Doe",
  "iat": 1793086572,
  "exp": 1793090172
}

JWT Signature Verification: Secret

Algorithm: HS256

Encoding Format

UTF-8
base64url

JWE Example:

Generate JWE Input

Encryption Configuration

Algorithm (alg)

Encryption Method (enc)

JWE Output

Encrypted JWE will appear here.

Decoded JWE Header

Decoded JWE header will appear here.

Decoded JWT Header

Decoded JWT header will appear here.

Decoded Payload

Decoded payload will appear here.

JWT Output

Decrypted JWT will appear here.

How the JWT & JWE Debugger Works

Step 1.

Paste or Generate a JWT:

Step 2.

Verify signature (JWT verification):

Step 3.

Sign / Create a JWT:

Step 4.

Encrypt JWT to JWE:

Step 5.

Decrypt JWE:

Step 6.

Inspect claims & debug:

What is a JWT (JSON Web Token)?

A JWT (JSON Web Token) is an open standard (RFC 7519) for transmitting information securely between parties as a compact, URL-safe JSON object. JWTs are widely used in authentication systems, enabling stateless session management and API security. A standard JWT has three parts:

Common Use Cases:

What is a JWE (JSON Web Encryption)?

A JWE (JSON Web Encryption) is another open standard (RFC 7516) for encrypting content, providing confidentiality for transmitted information. JWE wraps content—such as a signed JWT—in an encrypted format that only intended parties can decrypt and read.

JWE Structure:

Common Use Cases:

JWT & JWE Debugger Best Practices