JWT Decoder
JWT Decoder
Decode and inspect JSON Web Tokens directly in your browser.
Common Claims
| Claim | Value | Date / Meaning |
|---|
What is a JWT?
JWT stands for JSON Web Token. It is a compact format commonly used to securely transmit information between parties as a JSON object.
JWTs are frequently used in authentication, authorization, APIs, microservices and distributed applications.
A typical JWT consists of three parts separated by dots:
Header.Payload.Signature
JWT Header
The Header normally contains metadata about the token, including the signing algorithm and token type.
Common fields include alg and typ.
JWT Payload
The Payload contains claims. Claims are pieces of information about a user, system, session or other entity.
Common registered claims include:
-
iss— Issuer -
sub— Subject -
aud— Audience -
exp— Expiration time -
nbf— Not valid before -
iat— Issued at -
jti— JWT ID
JWT Signature
The Signature is used to verify that the token was created by a trusted party and that its signed contents have not been modified.
This decoder displays the signature as part of the JWT, but it does not verify the signature.
Is it safe to decode a JWT?
A JWT is encoded, not encrypted by default. This means the Header and Payload can normally be decoded by anyone who has access to the token.
You should therefore avoid sharing JWTs containing sensitive information. Access tokens and authentication tokens should be treated as sensitive credentials.
How to use the JWT Decoder
- Copy your JWT token.
- Paste it into the JWT Token field.
- Click Decode JWT.
- Inspect the Header, Payload and Signature.
- Review common claims and timestamp information when available.
Privacy
This tool performs JWT decoding directly in your browser using JavaScript.
The token does not need to be sent to an external server for decoding.
Comentários
Postar um comentário