Encoded Token
👆 Paste a JWT token to decode it
or click Sample to see an example
What is a JWT?
📋 Structure
A JSON Web Token consists of three parts separated by dots: header.payload.signature. Each part is Base64URL encoded.
🔑 Header
Contains the token type (typ) and signing algorithm (alg), such as HS256, RS256, or ES256.
📦 Payload
Contains the claims — statements about the user and metadata. Common claims include sub, iat, exp, and iss.
✅ Signature
Created by signing the header and payload with a secret key. Used to verify the token hasn't been tampered with.
⏰ Expiration
The exp claim sets when the token expires. This decoder automatically checks if your token is still valid or has expired.
🔒 Security Note
JWTs are not encrypted — anyone can decode the payload. Never put sensitive data like passwords in a JWT. This tool runs 100% in your browser.
Build with Pandan APIs
Free developer tools and APIs for your next project