JWT Decoder

Decode JWT tokens online to inspect the header, payload, and signature with formatted output.

Input

Header

Payload

Signature

Algorithm (alg)

Type (typ)

Issuer (iss)

Subject (sub)

Audience (aud)

Expiration (exp)

Not before (nbf)

Issued at (iat)

JWT ID (jti)

What is a JWT?

A JWT (JSON Web Token) is an open standard (RFC 7519) for securely transmitting information between parties. It encodes claims as a JSON object and consists of three segments joined by dots (.), commonly used for API authentication and authorization.

JWT structure

Header/Contains the token type (typ) and signing algorithm (alg)
Payload/Contains claims such as user identity, permissions, and expiration time
Signature/Generated from the encoded Header and Payload with a secret key, used to verify the content is unmodified

Example

The following token includes all standard claims (iss, sub, aud, exp, nbf, iat, jti). Paste it above to decode:

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJlYXN5ZGVidWciLCJzdWIiOiIxMjM0NTY3ODkwIiwiYXVkIjoiZWFzeWRlYnVnLWFwcCIsImV4cCI6MjE0NzQ4MzY0NywibmJmIjoxNjAwMDAwMDAwLCJpYXQiOjE2MDAwMDAwMDAsImp0aSI6Imp0aS1hYmMtMTIzIn0.tF5VDG8F2Z5OTE2nOekGQeY1KJEniWT8hzOLY3zOKPY

Common Claims

iss/Issuer
sub/Subject
aud/Audience
exp/Expiration time
nbf/Not before
iat/Issued at
jti/Unique identifier (JWT ID)

Note· This tool only decrypts the information in the JWT and does not verify the signature.