JWT Decoder

Decode and inspect JWT tokens. View header, payload claims, expiration, and algorithm. Signature verification requires the secret key and is not performed here.

Algorithm HS256Type JWT Valid — expires in 2281754h 38m (Nov 20, 2286, 05:46:39 PM UTC)
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzEyMyIsIm5hbWUiOiJBbGljZSIsImVtYWlsIjoiYWxpY2VAeXVybGllLmNvbSIsInJvbGUiOiJ1c2VyIiwiaWF0IjoxNzAwMDAwMDAwLCJleHAiOjk5OTk5OTk5OTl9.example_signature
HeaderPayloadSignature
ClaimValueDescription
sub
"user_123"
Subject — who the token refers to
name
"Alice"
Full name
email
"alice@yurlie.com"
Email address
role
"user"
Role
iat
1700000000Nov 14, 2023, 10:13:20 PM UTC
Issued at (Unix)
exp
9999999999Nov 20, 2286, 05:46:39 PM UTC
Expiration time (Unix)
Signature verification requires the secret key and is not performed in the browser. This tool is for decoding and inspecting only.

JWT Structure

A JWT has three Base64url-encoded parts separated by dots: header.payload.signature. The header specifies the algorithm; the payload contains claims (user data + expiry); the signature verifies integrity.