WorkspaceSecurity & CryptographyClient-Side Sandbox

JWT Inspector

Deep security audit of JSON Web Tokens including HMAC-SHA256 signature verification, `alg: none` detection, and claim lifetime checks.

Input Buffer

1 ln · 155 ch · 155 B

Secret Key / Passphrase

ENCODING: UTF-8AUTO-RUN: ENABLED

Output Buffer

OUT: 1 LN · 0 B⌘↵ RUN · ⌘⇧C COPY

How to Use JWT Inspector

Paste a JWT in the primary input and optional HMAC secret in the secondary input.
Inspect cryptographic signature validity, algorithm warnings (`none` or weak secrets), and claim audits.

Run / Process tool outputCtrl + Enter

Copy primary output to clipboardCtrl + Shift + C

Open global command paletteCtrl + K

Evaluate password entropy in bits, character pool diversity, pattern weaknesses, and offline crack-time estimates.

Generate SHA-1, SHA-256, SHA-384, and SHA-512 cryptographic digests simultaneously using Web Crypto API.

Compute Hash-based Message Authentication Codes (HMAC-SHA256, HMAC-SHA384, HMAC-SHA512) with a secret key.

Authenticated AES-256-GCM client-side encryption and decryption using PBKDF2 (100,000 iterations) key derivation.

Generate 2048-bit or 4096-bit RSA-OAEP / RSASSA-PKCS1-v1_5 public and private key pairs in PEM (SPKI / PKCS#8) and JWK formats.

Generate CSPRNG 128-bit, 192-bit, 256-bit, and 512-bit cryptographic keys in Hex, Base64, Base64URL, and Uint8Array formats.