Decoder · runs in your browser
JWT decoder
Paste a JSON Web Token to see its header and payload, with exp, iat and nbf as real dates and a clear expired / valid status. Tokens are decoded locally; they're never sent to a server.
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJodHRwczovL2F1dGguZXhhbXBsZS5jb20iLCJzdWIiOiJ1c2VyXzEyMyIsIm5hbWUiOiJBc2hhIFJhbyIsInJvbGUiOiJhZG1pbiIsImlhdCI6MTcwMDAwMDAwMCwiZXhwIjoxNzAwMDAzNjAwfQ.qFxLtdM8Vh5LNBqYsHcY8W8rEj0lJ1sYb1Ff3Wl6rSs
Decoded in your browser; the token is never sent anywhere. The signature isn't verified, since that needs your secret or public key.
expiredAlgorithm HS256
| iss | https://auth.example.comIssuer |
| sub | user_123Subject (user) |
| name | Asha RaoName |
| role | adminRole |
| iat | 2023-11-14T22:13:20Z (1074 days ago)Issued at |
| exp | 2023-11-14T23:13:20Z (1074 days ago)Expires |