JWE Decrypt
Decrypt a compact token with the shared key and verify it was not changed
Decrypt a compact JWE
The token header determines the required key length.
Use the key from the original encryption.
What This Tool Verifies
Compact JWE stores a protected JSON header, initialization vector, ciphertext, and authentication tag in one five-part Base64URL token. This focused workflow uses a previously shared symmetric key directly, so the second token segment is empty.
Decrypt a Compact JWE
- Paste the five-part compact JWE exactly as received.
- Paste the shared Base64URL key whose length matches the enc header.
- Decrypt. Plaintext is returned only after AES-GCM authenticates the token.
JWE Compatibility
Encryption uses alg: dir with enc: A256GCM. Decryption accepts direct-key A128GCM, A192GCM, and A256GCM compact tokens. Password-based PBES2, RSA, ECDH, compressed payloads, and JWE JSON Serialization use different workflows and are not guessed here.
The format is defined by RFC 7516 and its algorithms by RFC 7518.