Inspect a bearer token payload
Input
eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4ifQ.signature
Output
Header: {"alg":"HS256"}
Payload: {"sub":"1234567890","name":"John"}
Parse and decode your JSON Web Token (jwt) and display its content.
JWT Decoder is useful when authentication breaks and you need to answer practical questions fast: who issued the token, when it expires, what audience it targets, and whether the payload looks sane.
eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4ifQ.signature
Header: {"alg":"HS256"}
Payload: {"sub":"1234567890","name":"John"}
It focuses on decoding and inspection. Signature verification still depends on validating the token with the correct secret or public key in your own auth flow.
Yes. Expired tokens can still be decoded, which is often exactly what you need during debugging.
No. The decoding happens in the browser.