JWT Decoder

Inspect JWT headers and payloads, with expiry checks. Decode JSON Web Tokens and inspect header and payload as formatted JSON. Automatic expiry and issued-at checks. Free online JWT debugger.

Esta herramienta funciona al 100 % en tu navegador. Lo que escribes nunca se envía a ningún servidor: incluso puedes quedarte sin conexión tras cargar la página.

Acerca de JWT Decoder

A JWT carries three Base64URL blocks — header, payload and signature — and debugging an API usually starts with "what is actually in this token?". Paste one here to see the algorithm in its header, every claim in its payload as formatted JSON, and human-readable timestamps for issued-at, not-before and expiry, including a live verdict on whether the token has expired. Signatures are not verified (that requires the secret), but the structure and claims are fully decoded.

Cómo usar JWT Decoder

  1. Paste the full JWT (all three dot-separated parts).
  2. Review the decoded header for the signing algorithm.
  3. Inspect the payload claims and timestamps.
  4. Check the expiry verdict before blaming your API.

Características principales

Does decoding a JWT require the secret key?
No. The header and payload are only Base64URL-encoded, not encrypted, so anyone can read them. Verifying the signature — proving the token was not tampered with — does require the secret or public key.
Is it safe to paste a JWT here?
The decoding happens entirely in your browser and nothing is transmitted. Even so, treat tokens like passwords and avoid sharing them publicly.

Herramientas de Herramientas para desarrolladores relacionadas

Más utilidades de la misma categoría.

Ver todas →