JWT
JWT Token Decoder
Enter a JWT to decode its header, payload, signature segment and common claims.
JWT Token
Paste a full JWT, usually in Header.Payload.Signature format.
Chars: 353Lines: 1Bytes: 353Parts: 3
Time Valid
Based on exp / nbf, the token is currently time-valid. Note: this does not mean the signature is verified.
Common Claims
Common standard claims are extracted from the JWT payload.
iss
https://tools.chatworkon.com
sub
user_123456
aud
developer-tools
exp
1/1/2030, 12:00:00 AM (timestamp: 1893456000)
nbf
1/1/2026, 12:00:00 AM (timestamp: 1767225600)
iat
1/1/2026, 12:00:00 AM (timestamp: 1767225600)
jti
-
Header JSON
{
"alg": "HS256",
"typ": "JWT",
"kid": "chatworkon-tools"
}
Payload JSON
{
"sub": "user_123456",
"name": "ChatWorkOn Tools",
"iss": "https://tools.chatworkon.com",
"aud": "developer-tools",
"iat": 1767225600,
"nbf": 1767225600,
"exp": 1893456000,
"role": "developer"
}
Signature Segment
dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk
Token Segments
Header
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImNoYXR3b3Jrb24tdG9vbHMifQ
Payload
eyJzdWIiOiJ1c2VyXzEyMzQ1NiIsIm5hbWUiOiJDaGF0V29ya09uIFRvb2xzIiwiaXNzIjoiaHR0cHM6Ly90b29scy5jaGF0d29ya29uLmNvbSIsImF1ZCI6ImRldmVsb3Blci10b29scyIsImlhdCI6MTc2NzIyNTYwMCwibmJmIjoxNzY3MjI1NjAwLCJleHAiOjE4OTM0NTYwMDAsInJvbGUiOiJkZXZlbG9wZXIifQ
Signature
dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk
Security Note
- JWT payload is only Base64URL encoded, not encrypted. Anyone with the token can decode and read it.
- Do not put passwords, secrets, identity numbers or other sensitive data in JWT payloads.
- Trust must be established by verifying the signature with a server secret or public key. This tool does not verify signatures.
How to Use
Decode Header
View JWT header fields such as alg, typ and kid.
Decode Payload
Inspect common claims like sub, iss, aud, exp, iat and nbf.
No signature verification
This tool only decodes and displays the token. It does not verify whether the signature is trusted.
Related Tools
Useful tools in the same category.