Verify JWT signature
Verify a JWT HS256 signature with an explicitly supplied shared key.
Input & settings
How to use this tool
Verify a JWT HS256 signature with an explicitly supplied shared key.
Limits and behavior
Results are generated in your browser, not uploaded to CraftAI. Inputs are size-limited and validated. Verify a JWT HS256 signature with an explicitly supplied shared key. Enter your own input, adjust settings, then process. Inspect and save the generated result. Reset or cancel to clear results. HS256 only; rejects alg confusion. Reports signature, exp/nbf state separately. This is not identity/authorization verification.
Verify a supported JWT signature
Check whether a compact JWT's HS256 signature matches the supplied key and token contents.
Does a valid HS256 signature prove the token is authorized?
No. Applications must also check claims such as issuer, audience, expiry and authorization context.
Related tools: decode jwt claims · generate hmac digest