Data · 1 file

Sample JWT File

A JSON Web Token: a base64url header, claims and signature. Ours is HS256-signed with a published test secret and validated with PyJWT.

JWT · 337 B

JSON Web Token (HS256)

A signed JWT with standard claims (iss, sub, aud, iat, nbf, exp in 2100) and custom roles. Verify it with the published test secret “samplefiles-test-secret-do-not-use” — never use it for anything real.

CC0 · free for any use · Verified by an independent tool · Report a problem

sample-hs256.jwt — first lines
eyJhbGciOiJIUzI1NiIsImtpZCI6InNhbXBsZS1rZXktMSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJodHRwczovL3NhbXBsZWZpbGVzLmNvbSIsInN1YiI6InVzZXItMTIzNCIsImF1ZCI6InNhbXBsZS1hcGkiLCJuYW1lIjoiU2FtcGxlIFVzZXIiLCJyb2xlcyI6WyJyZWFkZXIiLCJlZGl0b3IiXSwiaWF0IjoxNzY4NDc4NDAwLCJuYmYiOjE3Njg0Nzg0MDAsImV4cCI6NDEwMjQ0NDgwMH0.egpXR3dYCnurfIFKTrbs-58GZHdqfW7uNny39rhTRt0

File details

Size
337 B (337 bytes)
MIME type
application/jwt
Notes
HMAC secret: samplefiles-test-secret-do-not-use
SHA-256
34d2be4537ae4dcbaf274b342f122f97ef9a45237fbe65a67b33dc1bc9961d8d
MD5
ed215df765ca722e614415ba2b3e25ec

Download from the command line

curl -L -o sample-hs256.jwt https://files.samplefiles.com/data/jwt/sample-hs256.jwt

Or check the download in your browser with the checksum calculator.

FAQ

Can I verify the signature?

Yes — the HMAC secret is samplefiles-test-secret-do-not-use. It exists only for testing; never reuse it.