All tools
Security
JWE Decoder
Inspect JWE headers and decrypt with dir, AES-KW or RSA-OAEP keys.
JWE token
Decryption key
alg: dir, A128KW, A192KW, A256KW, RSA-OAEP, RSA-OAEP-256 · enc: A128GCM, A192GCM, A256GCM, A128CBC-HS256, A192CBC-HS384, A256CBC-HS512
Protected header
Paste a token to inspect its header.
Decrypted payload
Waiting for a token. Try the Sample button.
About JWE decryption
- The protected header is readable without a key. The payload needs the recipient's key: a shared symmetric key for
dir/AxxxKW, or an RSA private key forRSA-OAEP. - Compressed payloads (
zip: "DEF") and nested JWTs are handled automatically. - 192-bit AES variants depend on browser support (Chrome does not implement AES-192 in Web Crypto).
- Keys stay in this tab — nothing is uploaded.