Security & Diagnosticsrfc 7519 claims & signature audit
100% Client-Side Decoded • Zero Server Telemetry
JWT & API Token Inspector
Decode JSON Web Tokens, inspect RFC 7519 claims, monitor live expiration countdowns, and verify HMAC signatures locally in your browser memory.
Sample Presets:
Header•Payload•Signature
571 charsHMAC Signature Verification
HS256Test your secret key against the token's cryptographic signature locally using browser Web Crypto.
Enter HMAC secret key to verify signature.
Token Expiration Telemetry
ActiveLive Status:Expires in 55m 0s
Issued At (iat)
Sep 28, 2026, 08:44:38
5m 0s ago
Expires At (exp)
Sep 28, 2026, 09:44:38
3300s left
Valid From (nbf)
Immediate
Valid now
Permissions, Roles & Scopes
role: authenticated
{
"iss": "https://xzyabc.supabase.co/auth/v1",
"sub": "8f1a23b4-5678-4901-b234-567890abcdef",
"aud": "authenticated",
"role": "authenticated",
"email": "polma.tambunan@fintech.id",
"app_metadata": {
"provider": "google",
"providers": [
"google"
]
},
"user_metadata": {
"name": "Polma Tambunan",
"avatar_url": "https://avatars.githubusercontent.com/u/10001"
},
"iat": 1790585078,
"exp": 1790588678
}