Header
{} My best utilities, now on your mobile.
Access all my tools and projects fast, optimized, and in one place.
JWT Decoder, Parser and Claims Inspector
Paste a JSON Web Token, decode its header and payload instantly, inspect registered claims, spot expired tokens, and copy clean JSON for debugging authentication flows.
Paste a token to decode its JSON header, payload and claims.
Decoding runs in your browser session. Do not paste production secrets into any tool unless your security policy allows it.
Payload
{} Signature
No signature segment
Zoom 100%
Utilities Studio
Want this utility on your website?
Customize colors and dark mode for WordPress, Notion or your own site.
Frequently Asked Questions
Does decoding a JWT prove that the token is valid?
No. Decoding only reveals the base64url-encoded header and payload. A token is trustworthy only after the signature, issuer, audience, expiration and related claims are validated by the application or identity provider.
Can I use this JWT decoder for access tokens and ID tokens?
Yes. The decoder is useful for inspecting OAuth access tokens, OpenID Connect ID tokens, session tokens and service-to-service tokens, as long as they use the standard three-part JWT format.
Why does the signature panel not verify the token?
JWT verification requires the correct secret, public key or JWKS configuration. This tool intentionally focuses on decoding and inspection so developers can see token contents without pretending that a visible signature string is proof of validity.
What should I check first when debugging a JWT?
Start with exp, nbf, iss, aud and alg. Most real production issues come from expired tokens, clock skew, wrong audience values, unexpected issuer URLs or insecure algorithm assumptions.
# Decode JWTs without losing the security context
A JSON Web Token looks compact, but it often carries the exact detail that explains an authentication failure: the signing algorithm, issuer, audience, subject, issued-at time, not-before time, expiration and application-specific authorization claims. This JWT decoder, parser and claims inspector turns the three token segments into readable JSON so you can debug auth flows faster.Decoded does not mean trusted
Anyone can base64url-decode a JWT. Trust begins only after your application verifies the signature with the correct secret, public key or JWKS, then validates issuer, audience, expiration and any domain-specific claims. Use this tool to inspect data, not to accept a token as authentic.
# What each JWT segment tells you
| Segment | Typical content | Debugging value |
|---|---|---|
| Header | Algorithm, token type and optional key id | Shows whether the token expects HS256, RS256, ES256 or another verification strategy. |
| Payload | Registered claims and application claims | Reveals identity, tenant, scopes, roles, expiration and audience mismatches. |
| Signature | Cryptographic signature bytes encoded as base64url | Confirms that a signature segment exists, but must be verified with the right key elsewhere. |
# Claims that usually explain broken authentication
- exp: if the token expired, refresh logic or clock settings may be wrong.
- nbf: if the token is not active yet, server and identity provider clocks may be out of sync.
- iss: if the issuer URL differs from configuration, the token may come from the wrong tenant or environment.
- aud: if the audience does not match the API identifier, the token was minted for another resource.
- alg: if the algorithm is unexpected, your verifier may reject the token or expose a dangerous configuration mistake.
# Use cases for a JWT parser during development
Frontend debugging
Inspect ID tokens and access tokens received after login to confirm scopes, roles and profile claims.
- Check profile claims
- Confirm scopes and roles
- Compare login environments
Backend API QA
Compare expected issuer and audience values with the token actually sent in an Authorization header.
- Validate audience shape
- Spot issuer mismatches
- Inspect bearer tokens
Identity provider setup
Check whether claims from Auth0, Azure AD, Cognito, Keycloak or a custom provider are shaped as your app expects.
- Review tenant data
- Check custom claims
- Compare provider mappings
# Common JWT mistakes this inspector makes obvious
Fast checks versus trust decisions
Advantages
- See malformed tokens immediately.
- Convert Unix timestamp claims into readable dates.
- Spot missing issuer, audience, subject or type values.
Disadvantages
- It cannot know your expected audience or issuer.
- It cannot verify a signature without the real key material.
- It cannot prove that scopes and roles are safe for your application.
Best practice workflow
Decode the token to understand what the client or API actually received.
Check exp, nbf, iss, aud, sub and alg before chasing application logic.
Verify signatures and trust decisions only in your auth layer.
Avoid sharing sensitive production JWTs in tickets, logs or screenshots.
Bibliographic References
- [1] IETF: JSON Web Token (JWT), RFC 7519
https://datatracker.ietf.org/doc/html/rfc7519
- [2] IETF: JSON Web Signature (JWS), RFC 7515
https://datatracker.ietf.org/doc/html/rfc7515
More utilities from Web Development
Aspect Ratio Calculator in Pixels. Online Proportions
Calculate new image, video and web design resolutions and maintain the exact proportion to avoid distorting graphics. Supports 16:9, 4:3, 21:9 and custom formats.
Use Tool
Data Time Calculator Impact of Web Speed
Discover how much lifetime your users lose waiting for your website to load on 3G, 4G, and 5G connections. Calculate the real impact of your site weight.
Use Tool
Online Color Converter RGB HEX and HSL
Convert colors between RGB, HEX and HSL instantly. Generate complementary color harmonies and analyze WCAG contrast. 100% client-side and private.
Use Tool
Excel and CSV to HTML Table Converter Code Generator
Convert your Excel or CSV data to clean, semantic HTML tables instantly. Free tool for developers and content creators.
Use Tool
Online Cron Expression Generator. Translator and Visualizer
Free visual tool to generate Linux Cron expressions. Translates * * * * * into human language and shows the next 5 executions in real time.
Use Tool
CSS Specificity Calculator Online. Selector Weight Visualizer
Calculate the specificity and exact weight of any CSS selector. Visual tool to understand which CSS rule wins the cascade and avoid using !important.
Use Tool
CSS to Inline HTML Converter. Inliner for Emails
Transform your stylesheets and CSS classes into automatically inlined styles in your HTML. Ideal for newsletters, transactional emails, and safe web layout.
Use Tool
Duplicate CSS Remover Online. Unify and Clean Stylesheets
Free tool to clean and purge duplicate CSS code. Unifies redundant selectors, respects the cascade, and reduces your file size instantly in the browser.
Use Tool
Security.txt Generator RFC 9116
Create your professional security.txt file to facilitate vulnerability reporting and comply with international web security standards.
Use Tool
Online Security Hash Generator
Calculate MD5, SHA-1, SHA-256 and SHA-512 hashes instantly. Free, private and ultra-fast security tool for developers. 100% Client-Side.
Use Tool
Online SSL/TLS Certificate Inspector View PEM and CRT Files
Analyze SSL certificate files (.pem, .crt, .der) locally. Check expiration dates, issuers, subjects and SHA-256 fingerprints without your data leaving your browser.
Use Tool
Free Online JSON Formatter and Validator
Free online tool to format, validate and repair JSON code. Beautify and format JSON. Detects syntax errors and improves code readability.
Use Tool
Online Keyboard Key Code Visualizer. KeyCode Inspector
Free online tool to see the event.key, event.code, event.which and location of any keyboard key in real time. Generates ready-to-use JavaScript code snippets.
Use Tool
LLM Cost Calculator. AI Model Pricing Estimator
Free online tool to estimate the cost of calling LLM APIs. Compare GPT-4o, Claude, Gemini, Llama and more with real token prices per million tokens.
Use Tool
Mobile Mockup Generator for App Store. iPhone and Google Pixel
Create professional presentations for the App Store and Google Play. iPhone and Pixel mockups with custom backgrounds, panoramic layouts, and bulk high-resolution export.
Use Tool
Musical Typography Scale. Modular Scale Calculator
Free online tool to create harmonious visual hierarchies using modular scales based on musical proportions. Generates ready-to-use CSS variables for your web design.
Use Tool
Placeholder Image Generator. Rapid Web Mockups Online
Create custom placeholder images for your web designs. Adjust resolution, background, text and export in PNG, WebP or JPEG instantly.
Use Tool
Private AI Prompt Library
Organize, tag and save your ChatGPT, Midjourney and Claude prompts privately. Your own prompt bank in localStorage.
Use Tool
Visual Readability Calculator WCAG and APCA
Check the real contrast of your designs with APCA (WCAG 3.0). Analyze how font weight and size affect actual readability. From simple ratios to perceptual legibility.
Use Tool
Online SVG Sanitizer
Optimize and clean SVGs exported from Figma, Adobe Illustrator or Inkscape. Remove metadata, unnecessary attributes and empty groups to get a production-ready SVG.
Use Tool
Free Online SVG to CSS and Data URI Converter
Transform your SVG icons and vectors into CSS code (Background or Mask) or compressed Data URI. Optimise your website performance by eliminating external HTTP requests.
Use Tool
URL Tracking Cleaner: Remove UTM, FBCLID and GCLID
Automatically remove tracking and advertising parameters from your URLs. Share clean links and protect your digital privacy instantly.
Use Tool
URL Encoder and Decoder Online
Convert special characters from any link to safe format (Percent-Encoding) or return them to their original readable state instantly and locally.
Use Tool
UTM Parameter Generator for Google Analytics
Create precise tracking links for your digital marketing campaigns. Optimized for Google Analytics and other analytics tools.
Use Tool
SERP Simulator and SEO Pixel Counter
Preview Google-style search snippets in real time, measure title and meta description width by pixels, and see exactly where your copy will be trimmed.
Use Tool
Visual CSS Grid & Flexbox Layout Generator
Design responsive layouts by dragging visual blocks, resizing the container, tuning alignment controls and using presets - then copy clean native CSS instantly.
Use Tool
CSS Box Shadow Generator
Design layered CSS box shadows visually with live preview, sliders, color pickers and presets. Copy clean native CSS instantly.
Use Tool
Promote this website
The internal propaganda desk for jjlmoya.es in Spanish and GameBob.dev internationally. Turn screenshots from your own pages into social images before Bob decides the feed is embarrassing.
Use Tool