Inspect claims
- Paste a JWT from a local test environment
Read iss, aud, sub, exp, and role-style custom claims
Decoding is useful for debugging claim shape and expiration timestamps.
Volver al Anterior
Decodificador JWT
Decodifica el encabezado y payload de un JSON Web Token localmente sin subir valores.
Se ejecuta localmente. La firma no se verifica.
Token JWT
Estado del token
Estado del token-
Algoritmo
-
Tipo
-
Emitido-
No antes de-
Expira-
Resumen
Pega un JWT antes de decodificar.
Encabezado
Payload
Next tool
Developer Tools Hub
Browse local developer utilities and workflows.
Next tool
Formatear el JSON del payload
Usa el Formateador JSON para validar, indentar o resumir errores del payload decodificado.
Firma
-
Ejemplos
JWT structure
base64url(header) + '.' + base64url(payload) + '.' + signature- header
- Algorithm and token type metadata
- payload
- Claims such as iss, sub, aud, iat, nbf, exp
- signature
- Cryptographic proof that must be verified by the receiving system
How this tool works
- Split the token by periods into header, payload, and signature segments.
- Decode the first two segments with Base64URL and parse the JSON content.
- Read standard time claims to show whether the token appears active, expired, or not yet valid.
Worked examples
Check expiration
- Token includes an exp claim
The status panel compares exp with the current browser time
This is a convenience check only; server-side validation still decides access.
FAQ
Use this result as an estimate
This decoder does not verify signatures, validate issuers, check audiences, or prove that a token should be trusted. Use your application backend or identity provider for real JWT validation.