DPoP Proof JWT Inspector

New

Decode and verify a DPoP proof (RFC 9449): header, htm/htu/iat/jti claims, ath hash and JWK thumbprint, with signature verification.

dpop jwtrfc 9449dpop proof decoderdpop validatoroauth dpop

Shortcuts:⌘ KSearch?HelpD MDark modeG TAll tools

Input

Output

Continue with:

Frequently Asked Questions

What is DPoP?

Demonstrating Proof-of-Possession binds OAuth tokens to a client key so stolen tokens cannot be replayed.

Is the signature verified?

Yes, using the public jwk in the proof header via WebCrypto.

Is my data uploaded?

No. Everything runs locally in your browser.

Generate MD5, SHA-1, SHA-256, SHA-512, and SHA-3 hashes from text or files.

Generate strong, random passwords with configurable length and character sets.

Generate RFC 4122 UUIDs (v1, v4, v5, v7) individually or in bulk.