Encrypt Online
Theme

JWE Header Decoder

Decode the protected header from a compact JWE before you debug keys or ciphertext

Read the protected header here. To read and authenticate the encrypted payload, use JWE Decrypt with the intended key.
Decode a compact JWE headerPaste a compact token and inspect its protected header JSON. A compact JWE has five segments. A compact JWS, including a signed JWT, has three segments.
Compact JWE has 5 segments. A 3-segment token is usually a signed JWT or JWS instead.
What This Decoder Reads

This page decodes the protected header from compact JWE so you can read fields such as alg, enc, kid, or zip without trying to decrypt anything.

Decode a Compact JWE Header
  1. Paste the compact JWE exactly as received.
  2. Click Decode protected header.
  3. Read the header JSON first to confirm the key-management and content-encryption algorithms before debugging anything else.
Why Token Shape Matters

Developers often paste a 3-segment signed JWT into a JWE flow by mistake. This page fails fast on that shape mismatch so you can stop debugging the wrong class of token.