Categorias
Texto e redação (12) Ferramentas para desenvolvedores (12) Tempo e data (8) Calculadoras (13) Finanças e dinheiro (11) Saúde e fitness (6) Imagem e design (10) Conversores de unidades (12) Aleatório e segurança (8) Utilidades do dia a dia (7)
Site
Todas as ferramentas Blog Sobre Contato

JWT Decoder

Inspect JWT headers and payloads, with expiry checks. Decode JSON Web Tokens and inspect header and payload as formatted JSON. Automatic expiry and issued-at checks. Free online JWT debugger.

Esta ferramenta roda 100 % no seu navegador. O que você digita nunca é enviado a servidor algum: você pode até ficar offline depois de carregar a página.

Sobre o JWT Decoder

A JWT carries three Base64URL blocks — header, payload and signature — and debugging an API usually starts with "what is actually in this token?". Paste one here to see the algorithm in its header, every claim in its payload as formatted JSON, and human-readable timestamps for issued-at, not-before and expiry, including a live verdict on whether the token has expired. Signatures are not verified (that requires the secret), but the structure and claims are fully decoded.

Como usar o JWT Decoder

  1. Paste the full JWT (all three dot-separated parts).
  2. Review the decoded header for the signing algorithm.
  3. Inspect the payload claims and timestamps.
  4. Check the expiry verdict before blaming your API.

Principais recursos

Does decoding a JWT require the secret key?
No. The header and payload are only Base64URL-encoded, not encrypted, so anyone can read them. Verifying the signature — proving the token was not tampered with — does require the secret or public key.
Is it safe to paste a JWT here?
The decoding happens entirely in your browser and nothing is transmitted. Even so, treat tokens like passwords and avoid sharing them publicly.

Ferramentas de Ferramentas para desenvolvedores relacionadas

Mais utilitários da mesma categoria.

Ver todas →

JSON Formatter

Beautify, validate and minify JSON with precise error locations.

Base64 Encoder / Decoder

Encode or decode Base64 safely, including emoji and non-Latin text.

URL Encoder / Decoder

Percent-encode or decode URLs and query-string values.

HTML Entity Converter

Escape or unescape HTML entities — keep code visible and safe.

Hash Generator

Create MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes instantly.

UUID Generator

Bulk-generate random UUID v4 identifiers with one click.