JWT Workbench

About

**JWT Workbench is a private JWT encoder, decoder, and signature verifier built for Chrome's side panel.**

Keep it open beside your app, API console, docs, or logs while you inspect bearer tokens, edit claims, re-sign payloads, and verify signatures. Everything runs locally in your browser: tokens, payloads, projects, and signing secrets are never uploaded or sent to a server.

**ENCODE AND RE-SIGN TOKENS**
• Edit JWT headers and payloads as JSON with live syntax highlighting.
• Choose HS256, HS384, or HS512 and see the signed token update as you type.
• Add an `exp` claim with one click using presets from 5 minutes to 1 year.
• Copy the finished token instantly for API requests, tests, or debugging.

**DECODE AND VERIFY**
• Decode a JWT from your clipboard with one click, or paste a token manually.
• View clean, highlighted header and payload JSON.
• Read `exp`, `iat`, and `nbf` claims as human-friendly timestamps.
• Spot expired tokens quickly with an "Expired" badge.
• Verify signatures against a saved or pasted secret and get a clear result.

**SAVE REUSABLE PROJECTS**
Stop rebuilding the same test tokens from scratch. Save a header, payload, algorithm, and secret as a named project, reopen it later, tweak a claim, and copy a fresh token. You can create, save, duplicate, rename, and delete projects as your environments change.

**MANAGE SIGNING SECRETS LOCALLY**
Store reusable secrets with friendly names like "staging-api" or "auth-service" and select them from the encoder or decoder. Secrets are stored with `chrome.storage.local` on this browser profile and are not synced or transmitted.

**WHY DEVELOPERS USE IT**
• Side panel workflow: no tab switching to an online decoder.
• Local by design: no tracking, no uploads, no remote code.
• Useful for backend, frontend, QA, support, and API debugging.
• System light/dark theme and a clean, focused interface.

JWT Workbench is made for anyone who works with authentication tokens and wants a fast, private tool close at hand.