JWT Decoder
Privacy: the token stays in your browser. Nothing is uploaded.
JWT Structure
Header
Payload
Signature
Token Analysis
—
Decode status
—
Signature
—
Algorithm
—
Expiration / nbf
iss—
sub—
aud—
iat—
nbf—
exp—
Custom claims
Optional HS256 signature verification
Only after you verify here will the UI say signature verified or failed. Decoding alone never implies a valid signature.
Enter a secret key to verify signature
Related tools
More from the same category
Learn more — open a section when you need details