Paste a JWT token and inspect every part instantly. Great for debugging auth, role claims, and expiration.
Privacy: processed locally, never uploaded.
↓ Paste in the input area below to see results instantly
Full token or Bearer-prefixed string. Decoding starts automatically after paste.
Paste a JWT token and inspect every part instantly. Great for debugging auth, role claims, and expiration.
Paste token
Bearer prefix is accepted and stripped automatically.
Inspect header and payload
Focus on alg, sub, aud, exp, and custom claims.
Check expiry and signature
The tool warns if token is expired, expiring soon, or missing signature.
JWT is a three-part token format commonly used for authentication.
The three parts are header, payload, and signature separated by dots.
Check exp first, then verify aud and iss match backend expectations.
If signature is empty, the token is often truncated or malformed.
Input
eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjMiLCJleHAiOjQ3MDI0NDQ4MDB9.signature
After decoding, you can inspect sub=123 and exp claim.
No. Decoding runs locally in your browser.
Because exp claim is earlier than current time. Check issuer timezone and expiration policy.
Yes, it is automatically stripped.
