JWT Decoder & Inspector
Invalid Token format
Header: Algorithm & Token Type
...
Payload: Data Claims
...
Signature Verified Status
No token entered
What is a JSON Web Token (JWT)?
A JSON Web Token (JWT) is a compact, URL-safe means of representing claims to be transferred between two parties. JWTs are commonly used for user authentication and authorization headers in modern web applications.
A standard JWT consists of three parts separated by periods (.):
- Header: Specifies the token type and the hashing algorithm used (e.g. HS256, RS256).
- Payload: Contains the claims, which are statements about an entity (usually the user) and additional metadata (like expiration time).
- Signature: Used to verify that the sender of the JWT is who it claims to be and to ensure that the message wasn't altered in transit.
Client-Side Privacy
Many online JWT decoders send your tokens to their servers for parsing. Since JWTs often contain sensitive user IDs, emails, roles, and permissions, sending them online exposes your application access keys. This tool decodes JWTs 100% locally in your browser.