A command-line toolkit for inspecting, verifying, cracking, and securing JSON Web Tokens. built to expose how JWT signing works and where it breaks.
-
Updated
Sep 21, 2026 - Python
A command-line toolkit for inspecting, verifying, cracking, and securing JSON Web Tokens. built to expose how JWT signing works and where it breaks.
JWTMaster is a free online JWT security toolkit for decoding, analyzing, testing, modifying, signing, and verifying JSON Web Tokens. It includes JWT risk analysis, HMAC secret testing, JWK injection testing, and controlled security testing tools for penetration testers, developers, security researchers, and cybersecurity learners.
JWT Toolkit — Decodificador y generador de JWT (HS256) en el navegador
A command-line tool for inspecting and tampering with JSON Web Tokens (JWTs). Built for authorized security testing, CTF challenges, and debugging JWT.
To associate your repository with the jwt-toolkit topic, visit your repo's landing page and select "manage topics."