Inspect JWT claims
Read a token’s header, payload, and timestamps. Decoding does not verify its signature.
Decoded header appears here.
Decoded claims appear here.
Decoding reveals contents; it does not verify a token's signature or prove that its claims are trustworthy. Treat pasted tokens as sensitive.
Read JWT claims safely
A JWT has three segments: header, payload, and signature. This tool decodes the first two and displays iat, nbf, and exp timestamps when present.
Decoding does not verify the signature, issuer, audience, or trustworthiness of a token. An expiration timestamp is descriptive, not proof that a token is valid. Avoid sharing real tokens with others.