TOOL · JWT

JWT decoder

Paste a JWT, get the header, payload, and signature broken out. No verification. That requires the issuer's public key. Flags common smells: alg=none, missing exp, exp in the past, sub missing.

INPUT
OUTPUT

HEADER

 

PAYLOAD

 

SIGNATURE