Why is my JWT returning 401?

Check exp, aud, and iss claims; clock skew and wrong signing secret are common causes.

Is it safe to paste JWTs online?

Use offline browser tools; never paste production tokens into untrusted sites.

Decode header and payload without verifying signature to see alg and exp.

Copy the failing request as cURL and follow our cURL API workflow.

workflow · developer

Debug JWT auth failures: decode token, validate claims, reproduce API call with cURL. Free browser tools.

Updated 2026-05-26

Paste token Inspect header and payload; note exp and alg. Open tool →
Validate JSON claims Copy payload JSON if you need structure checks. Open tool →
Reproduce API call Paste failing Authorization header from DevTools as cURL. Open tool →

Preset: optimized export

Why is my JWT returning 401?: Check exp, aud, and iss claims; clock skew and wrong signing secret are common causes.
Is it safe to paste JWTs online?: Use offline browser tools; never paste production tokens into untrusted sites.
What is the first debugging step?: Decode header and payload without verifying signature to see alg and exp.
How do I test the API after decoding?: Copy the failing request as cURL and follow our cURL API workflow.