DEV🔓JWT Decode
Parse Header / Payload / signature
JWT decoding = Base64URL decode, fully local. <strong>The signature is not verified</strong> (that requires the key server-side). Common claims: <code>exp</code> (expiry) / <code>iat</code> (issued at) / <code>sub</code> (subject) / <code>iss</code> (issuer).
JWT Decode: Paste to Parse Header/Payload
Typical scenarios: ① view the user information inside a login token; ② check whether a failed login is due to an expired token or a wrong issuer; ③ verify the fields of a received token.
How to use: paste the token into the input box. The tool parses the header and payload automatically and highlights key fields such as expiry, issued-at, and issuer.
Notes: ① this tool only displays content — it does not verify the signature, and whether the server accepts the token must be decided by the backend; ② tokens carry user identity, so never paste them into tickets or public chats; ③ the expiry field makes it easy to tell whether you need to log in again.
Related Tools
← Home