JWT Debugger
Decode & Inspect JSON Web Tokens
Paste a token to inspect payload claims & expiration status.
Decoded Token Components
HEADER: ALGORITHM & TOKEN TYPE
{}
PAYLOAD: DATA CLAIMS & EXPIRY
{}
Issued At (iat):N/A
Expires At (exp):N/A
Subject (sub):N/A
Frequently Asked Questions
A JWT consists of 3 dot-separated Base64URL-encoded parts:
• Header (Red): Contains token type (JWT) and cryptographic signing algorithm (e.g. HS256, RS256).
• Payload (Purple): Contains claims/data (e.g., user ID, roles, email,
• Signature (Blue): Cryptographic signature to verify the sender and ensure data hasn't been tampered with.
• Header (Red): Contains token type (JWT) and cryptographic signing algorithm (e.g. HS256, RS256).
• Payload (Purple): Contains claims/data (e.g., user ID, roles, email,
exp expiration date).• Signature (Blue): Cryptographic signature to verify the sender and ensure data hasn't been tampered with.
Yes, 100% safe! This tool runs entirely in your browser using client-side JavaScript. Your tokens are NEVER sent across the internet or stored on any server.