{{ SUBTLE_MSG }} Decoding still works — it is base64 and JSON, not cryptography.
Token
Paste a JWT. Nothing leaves the page and nothing is stored.
header ·
payload ·
signature
{{ s.t }}
{{ decoded.error }}
Decoded
{{ pane.label }}
{{ pane.text }}
{{ pane.error }}
{{ c.label }} · {{ c.key }}
{{ c.abs }}
{{ c.rel }}
{{ validity.text }}
Signature
{{ keyHint }}
{{ verifyState.text }}
Header & payload
The header's alg chooses the algorithm; the picker just writes it there.
Header
Payload
Signing key
{{ encKeyHint }}
{{ encError }}
Token
{{ s.t }}
{{ qr.label }}
This QR carries a secret. Anyone who photographs the screen has it.
{{ qr.error }}
Click to show
Hidden because “Reveal secrets” is off — click the code to show it here.
Value
{{ qr.value }}