Home/Developer
toolalot.com/jwt

JWT decoder

See a JWT’s header and claims and when it expires. The token never leaves your browser.

HS256

Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "1234567890",
  "name": "Ali Rezaei",
  "role": "admin",
  "iat": 1761900000,
  "exp": 4102444800
}

Signature

cYT-EMS9vzOogpuPaPErJZ32q3mjS5X8NsBL4krQL-Y

The token is decoded only in your browser. The signature is not verified, since that needs the key, so don’t trust the claims of a token you haven’t verified.

Everything runs in your browser. Nothing is sent to a server.