Raw (Base64URL)
Decoded (JSON)
Clear
Load Sample
Download
Check Expiration
Extract Claims
Copy
Copy
Copy
Sample JWT loaded!
No JWT to copy
JWT parts copied to clipboard!
Failed to copy JWT parts
No JWT to download
Decoded JWT downloaded!
No JWT decoded
Invalid section
%s copied to clipboard!
JWT decoded successfully
Header
Payload
Signature
Algorithm:
Type:
Security:
Description:
Symmetric
HMAC using SHA-256
Standard Claims
Custom Claims
Custom claim
Issuer - identifies the principal that issued the JWT
Subject - identifies the principal that is the subject of the JWT
Audience - identifies the recipients that the JWT is intended for
Expiration Time - identifies the expiration time after which the JWT must not be accepted
Not Before - identifies the time before which the JWT must not be accepted
Issued At - identifies the time at which the JWT was issued
JWT ID - provides a unique identifier for the JWT
in %d minutes
%d minutes ago
in %d hours
%d hours ago
in %d days
%d days ago
Warnings
Recommendations
HMAC algorithms require shared secret - ensure proper key management
Always verify JWT signatures on the server
Use HTTPS for token transmission
Implement proper token expiration
Consider using refresh tokens for long-lived sessions
JWT has expired!
JWT is not yet valid!
JWT is currently valid!
No expiration information available
Claims list copied to clipboard!
Failed to copy claims
JWT template copied to clipboard!
Failed to copy template
Key ID:
Content Type:
Click "JWT Decode" to decode the token
Please enter a JWT token to decode