Validador JWT · Guía
How to Verify a JWT Signature
Verifying a signature is what separates a trusted token from an arbitrary string. Here is the process for HS256 tokens.
Provide token and secret
Paste the full JWT and the shared secret used to sign it. The validator recomputes the signature over the header and payload and compares it to the one in the token.
Interpret a match
If the computed signature matches, the token is authentic for that secret and nobody has altered the header or payload. If it does not match, either the secret is wrong or the token was tampered with.
Verify claims too
A valid signature does not mean a usable token. Still check exp for expiry and iss/aud for the right issuer and audience before trusting it.
Preguntas frecuentes
Puedo usarlo en trabajo de produccion?
Si, para inspeccion, formato y generacion rapida. Revisa siempre el resultado antes de llevarlo a codigo o configuracion de produccion.
¿Listo para probarlo?
Abre la herramienta gratuita Validador JWT en el navegador y aplica lo que acabas de leer: sin registro y procesando localmente.
Abrir la herramienta Validador JWT