JWT Inspector

Decode, inspect, and analyze JSON Web Tokens payloads and signatures locally.

Token Expired

Paste your token below. The parts are color-coded (Header = Red, Payload = Purple, Signature = Blue).

Client Decoded: Token decoding is done entirely in your browser. No token keys are ever sent to external servers.

HEADER: ALGORITHM & TOKEN TYPE

{
  "alg": "HS256",
  "typ": "JWT"
}

PAYLOAD: DATA / CLAIMS

{
  "sub": "1234567890",
  "name": "John Doe",
  "admin": true,
  "iat": 1782955200,
  "exp": 1784018400,
  "email": "john@dev.com"
}

Issued At (iat):7/2/2026, 1:20:00 AM

Expiration (exp):7/14/2026, 8:40:00 AM

SIGNATURE (Verified locally)

HMACSHA256(
  base64UrlEncode(header) + "." +
  base64UrlEncode(payload),
  your-256-bit-secret
)