JWT inspector
Decode JWT headers, claims, and expiry dates.
About JWT inspector
Inspect the readable parts of a JSON Web Token. The header and payload are encoded JSON, so decoding them helps debug claims and time fields without contacting an authentication service.
Steps, and limitations
How to use it
- Paste a JWT in the expected compact format.
- Inspect the decoded header, payload, and time claims.
- Check signature validity and authorization separately in your trusted application.
Things to know
- This tool does not verify signatures. Anyone can construct a token with arbitrary claims.
- A readable or unexpired token is not necessarily valid. Treat live bearer tokens as secrets.