JWT Decoder

Decode and inspect JSON Web Token header, payload, and signature. All processing happens in your browser.

Header (Algorithm & Token Type)

alg
"HS256"
typ
"JWT"

Payload (Claims)

sub
"1234567890"
name
"UtilityOne User"
iat
1716239022
Monday, May 20, 2024 at 9:03:42 PM UTC
exp
1716325422
Tuesday, May 21, 2024 at 9:03:42 PM UTC
iss
"utilityone.in"
aud
"developers"

Signature

signature_placeholder

Signature verification requires the signing key and is not performed for security reasons.

What Is a JSON Web Token?

A JSON Web Token (JWT) is a compact, URL-safe token format defined in RFC 7519. JWTs carry claims between two parties and are commonly used for authentication, authorization, and information exchange in web applications.

A JWT consists of three Base64URL-encoded parts separated by dots: the Header (algorithm and type), the Payload (claims like subject, expiration, issuer), and the Signature (used to verify the token hasn't been tampered with).

Frequently Asked Questions

Is my JWT sent to a server?

No. The JWT is decoded entirely in your browser using Base64 parsing. Your token never leaves your device.

Does it validate the signature?

This tool decodes and displays the token structure. Signature verification requires the signing key, which is not handled for security reasons.

Related Tools

View All Tools