🔑 JWT-Dekoder

JSON-Web-Tokens dekodieren – siehe Header, Nutzlast und Ablauf

🔒 Dein Bild verlässt nie dein Gerät. Die gesamte Verarbeitung erfolgt lokal in deinem Browser mit JavaScript Base64 decoding. Kein Upload, kein Server, kein Tracking.

Funktionen

  • Full Token Inspection — Decode and display the header, payload, and signature of any JWT token.
  • Expiration Check — See issued-at and expiration timestamps with human-readable dates and expiry status.
  • Claims Display — View all standard claims — issuer, subject, audience, and custom fields.
  • Fully Offline — Decoding happens in your browser. Your tokens are never sent to any server.

So funktioniert's

  1. Paste your JWT — Paste a JSON Web Token in the input field.
  2. Inspect the decoded parts — View the header (algorithm, type), payload (claims, timestamps), and signature.
  3. Check expiration — See whether the token is still valid or has expired.

Anwendungsfälle

  • Debug authentication issues by inspecting JWT claims
  • Verify token expiration and issuer before trusting it
  • Inspect tokens during API development and testing
  • Learn about JWT structure by examining real tokens

Häufig gestellte Fragen

Does this verify the JWT signature?

This tool decodes the token to show its contents. Signature verification requires the secret key or public key, which we don't collect for privacy reasons.

Is it safe to paste my JWT here?

Yes. Everything runs locally in your browser. Your token is never sent to any server or stored anywhere.

What JWT formats are supported?

Standard three-part JWTs (header.payload.signature) using Base64URL encoding. This covers JWTs from all major identity providers.

Verwandte Werkzeuge