What is this tool?
JWE, or JSON Web Encryption, is a JOSE format for encrypted content. A compact JWE normally has five Base64URL sections: protected header, encrypted key, initialization vector, ciphertext, and authentication tag.
How to use it
Paste a compact JWE with five dot-separated parts to decode the protected header and check section lengths, algorithm names, key id, and encryption method.
Common uses
- Confirm whether an encrypted token is valid compact JWE shape.
- Inspect
alg,enc,kid,zip, and other protected header fields. - Check whether each compact JWE section is present before debugging a backend integration.
Common mistakes
- Parsing a JWE is not the same as decrypting it.
- The ciphertext payload is intentionally unreadable without the correct key.
- A token can have a valid five-part structure and still fail decryption or authentication.
Practical example: Checking JWE compact structure
Paste a compact JWE and verify that it has five parts. The protected header should name the key management algorithm and content encryption method, such as alg and enc.
Privacy
This tool is designed to process your input locally in the browser. Avoid entering passwords, private keys, or other sensitive production data into any online tool.
Frequently asked questions
Can this decrypt a JWE?
No. This tool parses the compact structure and protected header only. Decryption requires the correct key and cryptographic operation.
How is JWE different from JWT?
A JWT is a token format that may be signed or encrypted. JWE specifically represents encrypted content and normally hides the payload.
Is the token uploaded?
No. Parsing runs locally in your browser.