Tools · Security

JWT decoder

Header · payload · signature. Decoded entirely in your browser.

Token

HEADER · alg / typ

{
  "alg": "HS256",
  "typ": "JWT"
}

PAYLOAD · claims

{
  "sub": "usr_4f2a",
  "name": "Ada Driss",
  "role": "owner",
  "iat": 1715948000
}

SIGNATURE · cannot be verified without the secret

0xL4VbN3UmEDS3kCJOyXc5xKxJTYbE6mFhGtUMzcZLs

The link encodes your inputs in the URL fragment. Nothing is uploaded.

The token is decoded entirely in your browser. Nothing leaves the page.