A JSON Web Token is signed, not encrypted: anyone holding it can read the payload. This tool decodes header and payload, does the arithmetic on the lifetime, and can recompute an HS256 signature without the secret ever leaving the browser.
JWT & OAuth Token Inspector
Articles that explain this
- JSON Web Tokens: Structure, What Belongs in the Payload and the Difference Between Decoding and Verifying Web Development
- Secure WordPress REST API: OAuth 2.0 and Custom Authorized Endpoints Web Development
- Google Ads API Passkey Requirement: What It Applies To and How to Find Forgotten Authorizations Digital Marketing
- Amazon Ads Refresh Tokens: 365-Day Expiry Since July 30, No Reminder Digital Marketing
OTHER TOOLS
- 301 Redirect Rule Generator (.htaccess, nginx, WordPress)
- Authentication: Basic Auth + htpasswd Generator
- Backup Retention & Transfer Window Planner
- Base64 Encode & Decode Tool
- BigQuery GA4 Query & UNNEST Builder
- Cache-Control & Revalidation Analyzer
- Canonical, hreflang and Indexing Signal Inspector
- CCTV Lens, Field of View & Pixel Density Calculator
- CCTV Storage & Network Bitrate Calculator
- Code Beautifier – JavaScript, PHP, Python, SQL & More
- Code Minifier – JavaScript, PHP, Python, SQL & More
- Compression Negotiation Checker: gzip, Brotli, zstd
- Connection Mirror: What the Server Sees
- Consent Mode v2 Decoder
- Conversion Window and Audience Duration Calculator
- Crawler IP Verifier: Googlebot, Bingbot, GPTBot and Others
- Crontab – Cronjob Builder & Explainer
- CSP Header Generator & Tracking-Linter
- DataLayer Inspector & Validator
- DateConverter – Unix Epoch Timestamp & ISO
- DNS Delegation, Serial & TTL Auditor: asking every nameserver separately
- Domain RDAP & Certificate Transparency Lookup: Registrar, Expiry, Forgotten Subdomains
- E-Commerce Anomaly Threshold Planner
- Email Authentication Checker: SPF, DKIM, DMARC, MX and CAA
- Email Tracking Pixel and Remote Content Auditor
- Frigate & Coral TPU Capacity Planner
- GA4 Anomaly Detector
- GA4 BigQuery Query Builder
- GA4 Bot Detector
- GA4 Channel Grouping & Unassigned Debugger
- GA4 E-Commerce Item Array Validator
- GA4 Event Parameter Generator
- GA4 gcd Parameter Decoder
- GA4 Measurement Protocol Payload Builder
- GA4 Parameter Analyser
- GA4 PII Checker
- GA4 Thresholding and Behavioural Modelling Checker
- GoogleAds – GAQL Query Explorer
- GTM Container History & Deep Search Engine
- GTM DataLayer Variable Path Flattener
- GTM Duplicates Analyser
- GTM Naming Convention Auditer
- HTTP Security Header Checker
- HTTP/3 & Alt-Svc Discovery Checker
- Image Delivery & Format Negotiation Auditor: WebP, AVIF, srcset, Vary
- IP Anonymization & Masking Tester
- JSON Beautifier
- JSON-LD Structured Data Generator & Checker
- JWT & OAuth Token Inspector
- LLM / Ollama VRAM & Memory Requirement Estimator
- LLM API Token & Cost Calculator
- Looker Studio Blend & Join Planner
- Mail Transport Security Checker: MTA-STS, TLS-RPT, DANE and STARTTLS
- Matomo Tracking API & Custom Dimension Builder
- Meta & TikTok CAPI Dedup & Hash Generator
- Meta CAPI Match Key Planner & Hasher
- mmWave Presence Zone Planner
- Modbus & SunSpec Register Decoder
- MQTT Discovery Payload Builder for Home Assistant
- Multi-WAN Failover & Policy Planner
- Open Graph & Social Card Checker: og:image, Twitter Card, Link Preview
- Page Structure & Readability Inspector: Headings, Sentences, Abbreviations
- Pi-hole / AdGuard Blocklist Converter & Overlap Analyzer
- Privacy Sandbox and Fingerprint Surface Detector
- Prometheus Time Series Capacity Planner
- PV Surplus & Battery Charging Calculator
- RAG Chunking & Embedding Planner
- Raspberry Pi Docker Compose Edge Linter
- Raspberry Pi Power Draw & UPS Runtime Calculator
- Redirect Chain & Canonical Host Tracer
- Regex Tester & Explainer
- robots.txt & llms.txt Generator for AI Crawlers
- RTSP Stream URL Builder & Vendor Reference
- Server-Side GTM – Cloud Run Cost Estimator
- Set-Cookie Analyzer & ITP Lifetime Simulator
- Soft 404 & Error Page Checker: what a site answers for an address that does not exist
- SQL Query Formatter & Parameter Binder
- TCF v2.2 Consent String Decoder
- Text & Code Diff
- Third-Party Origin & Subresource Integrity Checker: who a page loads from, and what it trusts
- TLS Certificate & Handshake Inspector
- Tracking and Consent Scanner for a Live Page
- Traefik Label & Compose Generator
- UniFi / IoT VLAN Subnet & CIDR Calculator
- UniFi PoE Power Budget & Load Calculator
- UniFi Zone Matrix Planner
- URL Decode & Encode Tool
- URL Pretty Print: Anatomy, Encoding and Tracking Parameters
- Usercentrics DataLayer Event Simulator
- UTM Campaign Link Builder & Strict Linter
- Web Bot Auth Signature Inspector and Crawler Range Checker
- Web Font Loading & Privacy Auditor: font-display, woff2, preload, third-party origins
- Well-known & Policy Files Inspector: security.txt, ads.txt, gpc.json, llms.txt
- WireGuard AllowedIPs & Split-Tunnel Calculator
- WordPress Dequeue Snippet Generator
- WordPress meta_query JOIN Analyzer
- WordPress REST Route & Permission Callback Generator
- WordPress Site Health Analyzer
- WP-CLI Database Cleanup Command Builder
- XML Sitemap Auditor: Index, lastmod and a Sample Check
- Zigbee & Wi-Fi 2.4 GHz Channel Planner