Decoding Error
Token Structure
HEADER
PAYLOAD
SIGNATURE
Decoded Header
Decoded Payload
Token Claims
Issuer (iss):
Subject (sub):
Audience (aud):
Expires (exp):
Not Before (nbf):
Issued At (iat):
JWT ID (jti):
Validation Status
Valid JWT structure
Signature not verified (requires secret key)
About JWT (JSON Web Tokens)
What is JWT?
JWT is an open standard (RFC 7519) for securely transmitting information between parties as a JSON object. It's commonly used for authentication and information exchange.
JWT Structure
- Header: Token type and signing algorithm
- Payload: Claims (data about the user/token)
- Signature: Ensures token hasn't been tampered with
Common Claims
- iss: Issuer - who created the token
- sub: Subject - user identifier
- aud: Audience - intended recipient
- exp: Expiration time (Unix timestamp)
- iat: Issued at time
- nbf: Not valid before time
This tool only decodes JWTs. Signature verification requires the secret key.