JWT Decoder & Validator

Decode header & payload, inspect claims, check expiry, and verify HMAC signatures — all in your browser.

Samples:

JWT Token

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c3IxMjMiLCJuYW1lIjoiQWxpY2UgSm9obnNvbiIsImVtYWlsIjoiYWxpY2VAZXhhbXBsZS5jb20iLCJyb2xlIjoiYWRtaW4iLCJpYXQiOjE3NDU3MjgwMDAsImV4cCI6OTk5OTk5OTk5OX0.placeholder_sig

HeaderPayloadSignature

Signature Verification

HMAC Secret

Encoded parts

Token is within its valid time window

Header

HS256JWT

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

sub

Subject

usr123

name

Alice Johnson

alice@example.com

role

admin

iat

Issued At

1745728000

Apr 27, 2025, 4:26:40 AM

exp

Expiration

9999999999

Nov 20, 2286, 5:46:39 PM

Expires in 95163d

Token Timeline

Issued AtApr 27, 2025, 4:26:40 AM

Expires AtNov 20, 2286, 5:46:39 PM

Lifetime95536d

Decoding happens entirely in your browser — no data is sent to any server. Never paste production tokens into untrusted tools.