100% Client-Side • Secrets Never Leave Your Device

JWT Decoder & Token Inspector

Inspect and debug JSON Web Tokens without security risks. Check decoded payload claims, algorithms, and active or expired token states.

Encoded Token

HeaderPayloadSignature

Active (Expires in 76 days on 1/15/2027)

Valid

Header (Algorithm & Type)

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload (Claims & Data)

{
  "sub": "user_123456",
  "name": "Alex Morgan",
  "admin": true,
  "iat": 1704541600,
  "exp": 1800000000
}

Standard JWT Claims Reference

iss (Issuer)Identifies the principal that issued the token.

sub (Subject)Identifies the user or identity (e.g. user_id).

aud (Audience)Identifies the intended recipients of the JWT.

exp (Expiration Time)Unix timestamp after which the token expires.

iat (Issued At)Unix timestamp indicating when the token was created.

nbf (Not Before)Timestamp before which the token must not be accepted.