JWT decoder
Paste a JSON Web Token: readable header and payload, expiry and issue time as dates, verify the signature with your key.
The tool could not be loaded. It needs JavaScript: please enable it or reload the page.
Header
Payload
Times
Verify signature
Frequently asked questions
Can you read a JWT without the key?
Yes. Header and payload are only Base64URL-encoded, not encrypted. The key is only needed to verify the signature. That is why secrets do not belong in the payload.
Which algorithms are verified?
HS256, HS384 and HS512 with the secret key, RS…, PS… and ES… with the public key in PEM format («-----BEGIN PUBLIC KEY-----»). EdDSA and encrypted tokens (JWE) are not supported.
What do exp, iat and nbf mean?
exp is the expiry, iat the time of issue, nbf the earliest time of validity, each in seconds since 1970. The tool shows them as dates in Swiss time.
More tools in this category
- Password generator Random passwords or one from your sentence.
- Calculate a hash SHA-256 and other checksums for text or files.
- Base64 & URL encoding Encode and decode text.
- Format JSON Make JSON readable and validate it.
- UUID generator Generate UUIDs version 4 and 7.
- Convert Unix time Timestamp to date and back.