JWT Decoder
Inspect JSON Web Tokens (JWT) instantly. Check claims, signature structure, and expiration status without sending data to servers.
JWT Decoder
How to Use JWT Decoder
Frequently Asked Questions
What is a JWT token?
JWT stands for JSON Web Token. It is a compact, URL-safe token format used to securely transmit information between parties as a JSON object. Commonly used for authentication in web applications.
What are the three parts of a JWT?
A JWT has three parts separated by dots: the Header (algorithm and token type), the Payload (claims and data) and the Signature (verification hash).
Is it safe to paste my JWT here?
Yes. This tool runs entirely in your browser. Your token is never sent to any server. However avoid sharing JWTs publicly as they may contain sensitive data.
Why is the signature shown as unverified?
Verifying a JWT signature requires the secret key used to sign it. Since we do not have your secret key we can only decode the contents not verify authenticity.
What does token expired mean?
JWTs contain an exp claim (expiration time). If the current time is past this value the token is expired and should no longer be accepted by your server.