Token Lens

JWT decode + verify. Runs 100% in your browser. No data is stored or sent.

Header

Payload

Signature

Verification (HS256)

Checks HMAC signatures only. No data leaves your browser.

No verification attempted.

Times

Issued at:

Expires at:

Privacy

All decoding happens locally. Nothing is stored or transmitted.