结果
A separated view of decoded fields, verification status, weak algorithms, expiry timestamps, and supporting certificate material.
按任务快速筛选工具，一键进入更合适的处理流程。
工作流
区分 JWT 解码与签名验证，在本地检查 token、证书和 key material。
Use this path before debugging JWT claims, certificates, JWKs, or hash evidence copied from an auth incident or staging integration.
A separated view of decoded fields, verification status, weak algorithms, expiry timestamps, and supporting certificate material.
这些工作流页面不会处理、收集或存储工具输入。请直接使用链接工具，并在处理敏感数据前查看其信任标签。
Start with the local token decoder to inspect header and payload fields while keeping signature verification as a separate step.
JWT 解码器Review exp, nbf, iat, and alg values, especially none, MD5-era hashes, and tokens copied from untrusted channels.
JWT 工作台Use the verifier with the expected secret or public key before treating decoded claims as trustworthy.
JWT 签名验证器Normalize JWKs, public keys, and certificate data when the verification key is unclear.
公钥 JWK 助手解码 JSON Web Token (JWT) 的头部和有效载荷。
在同一本地优先工作区中完成 JWT 编码、解码与校验。
验证 JWT 签名（HMAC）并校验声明信息——完全在客户端完成。
本地生成 PKCE verifier/challenge，并检查粘贴的 JWKS 或用它验证 JWT。
在浏览器本地转换 PEM/SPKI 公钥和 JWK，检查密钥元数据并计算 RFC 7638 指纹，无需上传密钥材料。
解码 PEM 编码的 X.509 证书，本地查看所有详细信息。
生成 MD5, SHA-1, SHA-256 和 SHA-512 哈希值。
Avoid common JWT handling mistakes when reviewing decoded or verified tokens.
Understand certificate chain fields before debugging key and token verification.
Choose hash algorithms deliberately when reviewing evidence or compatibility.
No. Decoding only makes the header and payload readable. Verification requires the expected algorithm and key material.
Inspect certificates when the signing key chain, public key format, or issuer data is part of the verification question.
Share only redacted claims that are necessary for the review. Remove tokens, subject identifiers, emails, and organization-specific secrets.