結果
A separated view of decoded fields, verification status, weak algorithms, expiry timestamps, and supporting certificate material.
依任務快速篩選工具，一鍵進入更合適的處理流程。
工作流程
區分 JWT 解碼與簽章驗證，在本地檢查 token、憑證與 key material。
Use this path before debugging JWT claims, certificates, JWKs, or hash evidence copied from an auth incident or staging integration.
A separated view of decoded fields, verification status, weak algorithms, expiry timestamps, and supporting certificate material.
這些工作流程頁面不會處理、收集或儲存工具輸入。請直接使用連結工具，並在處理敏感資料前查看其信任標籤。
Start with the local token decoder to inspect header and payload fields while keeping signature verification as a separate step.
JWT 解碼器Review exp, nbf, iat, and alg values, especially none, MD5-era hashes, and tokens copied from untrusted channels.
JWT 工作台Use the verifier with the expected secret or public key before treating decoded claims as trustworthy.
JWT 簽章驗證器Normalize JWKs, public keys, and certificate data when the verification key is unclear.
公鑰 JWK 助手解碼 JSON Web Token (JWT) 的標頭與有效載荷。
在同一本地優先工作區中完成 JWT 編碼、解碼與驗證。
驗證 JWT 簽章（HMAC）並校驗聲明——完全在客戶端完成。
本機產生 PKCE verifier/challenge，並檢查貼上的 JWKS 或用它驗證 JWT。
在瀏覽器本機轉換 PEM/SPKI 公鑰和 JWK，檢查金鑰中繼資料並計算 RFC 7638 指紋，無需上傳金鑰材料。
解碼 PEM 編碼的 X.509 憑證，本地查看所有詳細資訊。
產生 MD5, SHA-1, SHA-256 和 SHA-512 雜湊值。
Avoid common JWT handling mistakes when reviewing decoded or verified tokens.
Understand certificate chain fields before debugging key and token verification.
Choose hash algorithms deliberately when reviewing evidence or compatibility.
No. Decoding only makes the header and payload readable. Verification requires the expected algorithm and key material.
Inspect certificates when the signing key chain, public key format, or issuer data is part of the verification question.
Share only redacted claims that are necessary for the review. Remove tokens, subject identifiers, emails, and organization-specific secrets.