JWT Secret Brute Force

Test a list of candidate secrets against an HS256/HS384/HS512 signed JWT — identifies weak secrets. 100% client-side using Web Crypto API. This free encoding & decoding tool runs entirely in your browser — no data leaves your device, no account required, and it keeps working offline once the page has loaded.