DevOnlineTools

JWT Decoder & Inspector

Decode and inspect JSON Web Tokens (JWT) to analyze header parameters, payload claims, token signatures, expiration dates, and issued timestamps.

devonlinetools://encoding/jwt-decoder
⌘ + EnterRun / Format
Shortcuts Active

Token Active

Expires: 9/26/2049, 3:17:02 AM

Issued: 1/18/2018, 1:30:22 AM

Signature Verification (HS256)
{
  "alg": "HS256",
  "typ": "JWT"
}
{
  "sub": "1234567890",
  "name": "Alice Doe",
  "admin": true,
  "iat": 1516239022,
  "exp": 2516239022
}

Standard Claims Legend

sub1234567890

Subject — Unique user ID or entity identifier

exp2516239022

Expiration Time — Date & time when token becomes invalid

iat1516239022

Issued At — Date & time when token was created

Code Snippets & Examples

Copy-paste ready code implementations for your project:

JavaScript (no external library)
function decodeJWT(token) {
  const [header, payload] = token.split('.').slice(0, 2);
  const parsePart = (str) => JSON.parse(atob(str.replace(/-/g, '+').replace(/_/g, '/')));
  return { header: parsePart(header), payload: parsePart(payload) };
}
Python (PyJWT)
import jwt

# Decode without verification
payload = jwt.decode(token, options={"verify_signature": False})
print(payload)

Preguntas Frecuentes

What is a JSON Web Token (JWT)?

A JWT is an open standard (RFC 7519) for securely transmitting information between parties as a JSON object. It consists of three Base64URL-encoded parts separated by dots: Header, Payload, and Signature.

Is it safe to paste my JWT token here?

Yes. All decoding takes place 100% locally in your browser using JavaScript. No tokens are sent to any server.