JWT Decoder

What is a JWT?

A JWT (JSON Web Token) is an open standard (RFC 7519) for securely transmitting information between parties. It encodes claims as a JSON object and consists of three segments joined by dots (.), commonly used for API authentication and authorization.

JWT structure

• Header/Contains the token type (typ) and signing algorithm (alg)
• Payload/Contains claims such as user identity, permissions, and expiration time
• Signature/Generated from the encoded Header and Payload with a secret key, used to verify the content is unmodified

Example

The following token includes all standard claims (iss, sub, aud, exp, nbf, iat, jti). Paste it above to decode:

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJlYXN5ZGVidWciLCJzdWIiOiIxMjM0NTY3ODkwIiwiYXVkIjoiZWFzeWRlYnVnLWFwcCIsImV4cCI6MjE0NzQ4MzY0NywibmJmIjoxNjAwMDAwMDAwLCJpYXQiOjE2MDAwMDAwMDAsImp0aSI6Imp0aS1hYmMtMTIzIn0.tF5VDG8F2Z5OTE2nOekGQeY1KJEniWT8hzOLY3zOKPY

Common Claims

• iss/Issuer
• sub/Subject
• aud/Audience
• exp/Expiration time
• nbf/Not before
• iat/Issued at
• jti/Unique identifier (JWT ID)