This is probably a super noob question, so please bear with. I’m using the jsonwebtoken library in Node to generate a JWT. I can copy and past this token into the debugger at jwt.io and see my header and all my payload data without a proper “Verify Signature” field. How is this so? Isn’t my data s…

Hey there @Tone welcome to the community! I apologize for the delayed response on this one but wanted to get it out there :slight_smile: [image] Tone: How is this so? Isn’t my data supposed to be encrypted using the signature? Can a hacker simply copy an access token from an HTTP response and …

Can JWT easily be hacked by Debugger?

JWT.io

Tone March 17, 2023, 4:59am 4

Much appreciated @Tyf! that answers my question. I’ll check out the docs you sent now

1 Like

Topic		Replies	Views
How jwt debugger can decode my jwt token JWT.io jwt , jwt-debugger	2	6875	April 7, 2023
Why does jwt.verify() give "invalid signature"? JWT.io	13	94779	January 22, 2019
JWT.io Debugger does validate at all. Considers ANY secret as valid. How is this possible? JWT.io jwt-debugger	3	1815	September 25, 2023
Can decode the jwt token from the website https://jwt.io/ Get Help	2	3372	December 24, 2018
Why JWT verify tampered tokens? JWT.io	4	4361	December 5, 2018

Can JWT easily be hacked by Debugger?

Related topics