JWT Security Scanner ♥

JSON Web Tokens (JWT) are crucial for security, but they often hide vulnerabilities. This scanner decodes and audits them.

Step 1: Paste Your Token

Copy the full JWT string (starting with eyJ...) from your local storage or API headers and paste it above.

Step 2: Analyze Security

We instantly check for:

• "None" Algorithm: A critical flaw where signatures are ignored.
• Weak Secrets: Warnings if HS256 is used without high entropy.
• Expiry: Checks if the exp timestamp is in the past.

Step 3: View Payload

See the decoded claims (User ID, Role, etc.) to debug your application's logic.