Enter the secret key used to sign the JWT. Only HS256 algorithm is currently supported.
header.payload.signature
Note: This decoder can verify HMAC-SHA256 (HS256) signatures when you provide the secret key. For other algorithms (RS256, ES256, etc.), signature verification is not yet supported. Always verify signatures server-side before trusting any data from a JWT.
Warning: This decoder only decodes and displays the token content. It does not verify the cryptographic signature. Always verify signatures server-side before trusting any data from a JWT.