JWT Decoder
Decode and inspect JSON Web Tokens (JWT). View header, payload, and expiration information.
How to Use JWT Decoder
- Paste your JWT token in the input field
- Click Decode JWT
- View the decoded header, payload, and signature
- Check the token expiration status
- Copy any section with one click
What is a JWT?
JSON Web Token (JWT) is an open standard (RFC 7519) for securely transmitting information between parties as a JSON object. JWTs are commonly used for authentication and authorization in web applications.
JWT Structure
A JWT consists of three parts separated by dots (.):
- Header - Contains the token type (JWT) and the signing algorithm (e.g., HS256, RS256)
- Payload - Contains the claims (user data and metadata like exp, iat, sub, etc.)
- Signature - Used to verify the token hasn't been tampered with
Common JWT Claims
- iss (Issuer) - Who issued the token
- sub (Subject) - The subject of the token (usually user ID)
- aud (Audience) - Intended recipient of the token
- exp (Expiration) - When the token expires
- iat (Issued At) - When the token was issued
- nbf (Not Before) - Token is not valid before this time
- jti (JWT ID) - Unique identifier for the token
Features
- Decode JWT header and payload
- View expiration status with color coding
- Display issued at and expires at dates
- One-click copy for any section
- Works entirely in your browser - no data is sent to any server
Security Note
This tool decodes JWTs but does not verify their signature. Never share sensitive JWT tokens publicly, as they may contain personal information. Always validate JWT signatures on your server before trusting the token contents.