JWT decoder

Token (JWT)

Only decoded – the signature is not checked. The token stays in your browser.

Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "1234567890",
  "name": "John Doe",
  "iat": 1516239022,
  "exp": 4102444800
}

Signature

SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c

Help & info

About this tool

Paste a token to see its header and payload as readable JSON, the times of iat, nbf and exp, and whether the token has expired. “Bearer ” in front is ignored. The token is only decoded in your browser; nothing is sent anywhere.

Good to know

The signature is not verified here, so a readable token is not necessarily genuine. Never trust the content of a token on the server without checking its signature.

More tools

JSON formatter – Format and validate JSON, YAML, TOML, XML, CSV
Format converter – JSON, YAML, TOML, XML and CSV into each other
Schema – Create and check a schema (JSON, XML, CSV)
Base64 – Encode and decode text
URL encode/decode – Encode, decode and split URLs
Hash generator – MD5, SHA-1, SHA-256 and more for text or files
UUID generator – Random or time-ordered UUIDs
Unix timestamp – Unix time to date and back
Color converter – HEX, RGB, HSL and contrast check