JWT Analyzer

Paste a JSON Web Token to decode it and flag security issues — signature stripping, key-injection headers, missing expiry, and exposed claims. Pro tests HMAC tokens against common weak secrets.

Tokens are analysed and not stored. Only paste tokens you are authorised to test.