Data & Developer

JWT Decoder

Decode and inspect a JSON Web Token. Detect expired tokens and verify HS256 / RS256 signatures locally in your browser.

validalg:HS256typ:JWT
▸token.inspector/segs=3/3 · len=184
JSON Web Token · Inspector
2h · 4pissued
Paste a token, inspect the three segments, and verify the signature locally — keys never leave your browser.
OK
Token state
valid
▾ token.input · header.payload.signature
184 chars
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkFsZXggVGhvbXBzb24iLCJpYXQiOjE3NjUwMDAwMDAsImV4cCI6MTc2NTAwMzYwMH0.DjwRbDB5Y1tE4V4sFK1ll7d0cGq0LKd3LR-AkFGTbL0
▾ payloadclaims
94 chars
{
  "sub": "1234567890",
  "name": "Alex Thompson",
  "iat": 1765000000,
  "exp": 1765003600
}
header
alg + typ
{
  "alg": "HS256",
  "typ": "JWT"
}
payload
claims
{
  "sub": "1234567890",
  "name": "Alex Thompson",
  "iat": 1765000000,
  "exp": 1765003600
}
signature
43 chars
DjwRbDB5Y1tE4V4sFK1ll7d0cGq0LKd3LR-AkFGTbL0
▾ claims.reference
rfc 7519 + common
claimvaluemeaning
sub1234567890Subject — who the token is about.
nameAlex ThompsonFull name (custom / OIDC).
iat1765000000 (12/6/2025, 5:46:40 AM)Issued-at time (epoch seconds).
exp1765003600 (12/6/2025, 6:46:40 AM)Expiration time (epoch seconds).
▾ signature.verify
HS256

// WARN:verification runs in your browser only. Don’t paste production secrets into any online tool — including this one.

Related tools

QR Code Generator

Generate a QR code from any URL or text. Download as SVG. Runs entirely in your browser.

JSON Formatter & Validator

Pretty-print, minify, and validate JSON. Identifies the exact line and column of any syntax error.

Password Strength & Entropy

Measure entropy in bits, estimate brute-force time, and see what's weakening your password.