JWE Decrypt
Decrypt a compact token with the shared key and verify it was not changed
Keep the Base64URL key separate from the compact JWE. Both are required to decrypt the message.
Decrypt a compact JWE
The token header determines the required key length.
Paste the key shared for this token. This tool does not derive a JWE key from a password.
What This Tool Verifies
Compact JWE stores a protected JSON header, initialization vector, ciphertext, and authentication tag in one five-part Base64URL token. This focused workflow uses a previously shared symmetric key directly, so the second token segment is empty.
Decrypt a Compact JWE
- Paste the five-part compact JWE exactly as received.
- Paste the shared Base64URL key whose length matches the enc header.
- Decrypt. Plaintext is returned only after AES-GCM authenticates the token.
JWE Compatibility
Encryption uses alg: dir with enc: A256GCM. Decryption accepts direct-key A128GCM, A192GCM, and A256GCM compact tokens. Password-based PBES2, RSA, ECDH, compressed payloads, and JWE JSON Serialization use different workflows and are not guessed here.
The format is defined by RFC 7516 and its algorithms by RFC 7518.