JWT 解码器

解码并检查 JSON Web Token。查看 header、payload 和 signature。免费使用，无需注册。

JWT Token

About JSON Web Tokens

JWT (JSON Web Token) is a compact, URL-safe token format used for authentication and information exchange. A JWT consists of three parts: Header (algorithm & type), Payload (claims & data), and Signature (verification). JWTs are commonly used in OAuth 2.0, OpenID Connect, and API authentication.

Frequently Asked Questions

What is JWT and why is it used?

JWT (JSON Web Token) is a compact, self-contained way to transmit information as a JSON object. It's widely used for authentication and authorization in APIs. The token is signed, so the server can verify it hasn't been tampered with. See Hash Generator for understanding token signatures.

Is it safe to paste my JWT token here?

This tool runs entirely in your browser—no data is sent to any server. However, JWTs often contain sensitive user information, so be careful pasting production tokens. Never share tokens with untrusted tools or paste them in public channels.

What's the difference between JWT and JWE?

JWT (Signed) proves the token wasn't modified and shows the payload in plain text (base64 encoded). JWE (Encrypted) encrypts the payload so only the intended recipient can read it. Use JWE when the payload contains truly sensitive data that shouldn't be visible to anyone with the token.

What is the "exp" claim and why does it matter?

The "exp" (expiration time) claim specifies when the token is no longer valid. Check this with your Unix timestamp converter to see if a token has expired. Always validate token expiration on the server before trusting it.

𝕏 Twitter in LinkedIn

评价此工具

3.9 / 5 · 77 人评价

保持更新

获取每周开发技巧和新工具通知。

无垃圾邮件，随时退订。

Enjoy these free tools?

☕Buy Me a Coffee

使用方法

Paste your JWT token in the input field
The header, payload, and signature are decoded automatically
View expiration time and other claims
Copy decoded sections as needed

常见用途

Debugging authentication tokens
Inspecting JWT claims and expiration
Verifying token structure during development
Understanding OAuth2 and API tokens

常见问题

What is a JWT?

JWT (JSON Web Token) is a compact, URL-safe token format used for authentication and information exchange. It contains a header, payload, and signature.

Is it safe to decode JWTs here?

Yes. Decoding happens entirely in your browser. No tokens are sent to any server. Note: decoding only reads the token — it does not verify the signature.

Can this tool verify JWT signatures?

This tool decodes and displays the token contents. Signature verification requires the secret key, which should not be entered into any online tool.