Question 1

Are my JWTs and secrets sent over the internet?

Accepted Answer

No. Unlike legacy JWT debuggers that parse tokens on external backends, this inspector operates 100% locally in your browser using window.crypto.subtle. No sensitive tokens, keys, or claims are ever transmitted.

Question 2

Which cryptographic algorithms are supported for verification?

Accepted Answer

The offline verifier supports HMAC SHA algorithms (HS256, HS384, HS512) and RSA public key algorithms (RS256, RS384, RS512) using native Web Crypto primitives.

Question 3

Can this tool parse expired tokens?

Accepted Answer

Yes. The tool parses expired tokens and highlights expiration status with a visual timeline gauge showing exactly when the token was issued, when it expired, and how much time has passed.