Online JWT Decoder

How it Works

JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. A JWT consists of three parts separated by dots (.):

• Header: Typically consists of two parts: the type of token (JWT) and the signing algorithm being used, e.g., HMAC SHA256 or RSA.
• Payload: Contains the claims. Claims are statements about an entity (typically, the user) and additional data.
• Signature: Used to verify the message wasn't changed along the way, and, in the case of tokens signed with a private key, it can also verify that the sender is who they say they are.

Note: This tool only performs Base64Url decoding on the Header and Payload. It does not verify the signature (as that requires your secret key, which you should never enter on an online tool). The entire process runs locally in your browser.

Usage Scenarios

• Debugging: Frontend developers can quickly inspect what user info (like `user_id`, `role`) is inside the backend token.
• Check Expiration: Token stopped working? Paste it here to see if the `exp` timestamp indicates it has expired.

FAQ

More Free Tools