SD-JWT VC Decoder
Decode Selective Disclosure JWTs (RFC 9901 SD-JWT / SD-JWT VC) — the EUDI wallet credential format. Splits issuer JWT, disclosures, and Key Binding JWT; matches disclosure digests (including nested and array-element disclosures, with the _sd_alg hash) and checks the KB-JWT sd_hash, all in your browser.
Follows IETF SD-JWT (RFC 9901) · SD-JWT VCRFC 9901 · draft-ietf-oauth-sd-jwt-vc·verified Oct 2026· double-checked Oct 2026— digests, sd_hash and processed payloads from RFC §4.2, §5, §6.3, A.1 and A.3; §7.1/§7.3 checks (signatures not verified); sha-256/384/512
SD-JWT VC is the primary remote-presentation format of the EUDI wallet (PID, IBAN attestations, SCA with dynamic linking via the KB-JWT) and the credential model AP2 agent-payment mandates build on — compare the AP2 Mandate Decoder. The issuer JWT never contains hidden claims, only salted hashes: the holder chooses which disclosures to attach, and the verifier recomputes each digest. Processing follows RFC 9901 §7.1 and §7.3; signature verification (issuer JWT and KB-JWT) against issuer trust lists and the holder key is out of scope for this tool — it decodes and checks structure and hashes.