Decode a JWT Token

Inspect what's inside a JWT without verifying the signature.

Input

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkFkYSIsImlhdCI6MTUxNjIzOTAyMn0.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c

Output

Header:  { "alg": "HS256", "typ": "JWT" }
Payload: { "sub": "1234567890", "name": "Ada", "iat": 1516239022 }
Signature: SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c

How it works

Decoding only, verifying the signature requires the secret. Never trust a decoded JWT without verifying server-side.

Try it yourself

Open the full JWT Decoder to run this example on your own data.

Open JWT Decoder