Inspect a bearer token payload
입력
eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4ifQ.signature
출력
Header: {"alg":"HS256"}
Payload: {"sub":"1234567890","name":"John"}
JSON Web Token(JWT)을 파싱·디코드하고 내용을 표시합니다.
JWT Decoder is useful when authentication breaks and you need to answer practical questions fast: who issued the token, when it expires, what audience it targets, and whether the payload looks sane.
eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4ifQ.signature
Header: {"alg":"HS256"}
Payload: {"sub":"1234567890","name":"John"}
It focuses on decoding and inspection. Signature verification still depends on validating the token with the correct secret or public key in your own auth flow.
Yes. Expired tokens can still be decoded, which is often exactly what you need during debugging.
No. The decoding happens in the browser.