Advanced JWT diagnostics
JWT Diff
Compare two JWTs field by field to see what changed in the decoded header and payload after refresh, login, environment changes or key rotation.
Why I compare JWTs instead of reading them side by side
Token problems are often caused by one changed claim: aud, iss, scope, role, kid, exp or a nested custom field. JWT Diff highlights changed and missing JSON paths.
The tool compares readable content; it does not verify either signature.
Both tokens stay in the browser page state and are not sent to a comparison API.
Related advanced tools
JWT Security Analyzer
Inspect a JWT for policy-sensitive security signals such as alg=none, unexpected algorithms, token-controlled key URLs, suspicious kid values, time claims, issuer and audience mismatches.
OIDC Discovery Checker
Check OpenID Connect or OAuth authorization-server metadata from an issuer URL, validate exact issuer matching and inspect JWKS and endpoint metadata in your browser.
JWK Inspector
Inspect a single JSON Web Key, identify key type and usage metadata, detect private key material and compute an RFC 7638 SHA-256 JWK thumbprint locally.