Back to Tools

Networking ยท Tokens

Inspect JWTs hiding in cookies

Paste a Cookie or Set-Cookie header. We extract each cookie, detect JWT-shaped values, and decode the header and payload. Signatures are not verified.

Runs locallyNo upload

Header value

We never verify signatures here - that requires the issuer's public key, which we don't have. Use this tool to read claims and decide what to test next.