Torito

JWT Decoder, Verifier & Signer

Inspect JWT headers and claims, verify signatures and create signed tokens without exposing tokens or cryptographic keys to a server.

About JWT labFeatures & how to use

Decode JWT claims, verify JSON Web Token signatures and sign tokens locally. Secrets, private keys and tokens never leave your browser.

What it can do

  • Decode compact JSON Web Tokens.
  • Verify HMAC, RSA, PSS and ECDSA signatures.
  • Sign tokens with local secrets or private keys.
  • Import local JWK or JWKS with explicit, unambiguous key selection; no remote key lookups.

How to use it

  1. Choose Decode, Verify or Sign.
  2. Enter the token, payload and key required by the operation.
  3. Run the operation and inspect the local result.