🎟️

JWT Decoder & Validator

Decode and inspect JSON Web Tokens

JWT Token

JWT Structure Explained

A JWT consists of three Base64URL-encoded parts:

1. Header

json
{
  "alg": "HS256",
  "typ": "JWT"
}


Specifies the signing algorithm and token type.
2. Payload

json
{
  "sub": "1234567890",
  "name": "John Doe",
  "iat": 1516239022,
  "exp": 1516242622
}

`` Contains the claims (statements about the user and metadata).

3. Signature

Created by signing the header and payload with a secret key.

Common JWT Claims

| Claim | Name | Description | issIssuerWho issued the token subSubjectWho the token represents audAudienceIntended recipient expExpirationWhen the token expires iatIssued AtWhen the token was created nbfNot BeforeToken not valid before this time

Frequently Asked Questions

What is a JWT?

A JSON Web Token (JWT) is a compact, URL-safe token format used for securely transmitting information between parties. It consists of three parts: header, payload, and signature, separated by dots.

Can this tool verify JWT signatures?

This tool decodes and displays JWT contents but does not verify signatures, as that would require the secret key or public key. For signature verification, you need access to the signing key on your server.

Is it safe to paste my JWT here?

This decoder runs entirely in your browser. Your JWT is never sent to any server. However, be cautious with production tokens that may contain sensitive claims. Consider using test tokens when possible.