JWT Token
Valid(expires 20 Nov 2286, 11:16:39 pm IST)
Algorithm: HS256
Timestamps
iat171623902221 May 2024, 02:33:42 am IST
exp999999999920 Nov 2286, 11:16:39 pm IST
Header
{"alg": "HS256","typ": "JWT"}PayloadValid
{"sub": "user_123","name": "Rohan Sharma","email": "rohan@example.com","role": "admin","iat": 1716239022,"exp": 9999999999}Signature
SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
Signature verification requires the secret key and cannot be done client-side securely. Use your backend to verify.
What is a JWT Decoder?
A JWT Decoder splits a JSON Web Token into its three parts — header, payload, and signature — and displays the decoded content. It shows the algorithm used, all claims including expiration time, and whether the token is currently valid or expired.
How to Use It
- 1Paste a JWT token (the three-part string separated by dots) into the input field
- 2The header and payload are decoded and displayed as formatted JSON instantly
- 3Check the 'exp' claim to see the expiration time in human-readable format
- 4Note: this tool only decodes — it does not verify the signature
Example
JWT eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiIxMjMiLCJleHAiOjE3NTEzNjY0MDB9.xxx decoded: Header: {alg: 'HS256', typ: 'JWT'}. Payload: {userId: '123', exp: 1751366400 → 1 Jul 2026 05:30 IST}.
Why Use It
- Inspect JWT tokens during API development and debugging
- Check token expiry without writing code to decode it manually
- Verify the payload contents (user ID, roles, scopes) in auth tokens
- Understand JWT structure when learning about authentication systems