JWT Decoder
Decode a JSON Web Token's header and payload, with readable standard claims and timestamps.
Decoding is not signature verification. Never trust a token until your application verifies its signature.
The token stays in your browser.
Header
Payload
Standard claims
Signature segment
JWT structure
A JWT has three dot-separated Base64URL segments: header, payload and signature. The first two are readable data; the third proves integrity only when verified with the correct key.
Common claims
iss identifies the issuer, sub the subject, aud the audience, and iat, nbf and exp are Unix timestamps.