TXT · Text & Data tools

JWT Debugger

JWT input
Encoded Structure
Signature is present, but not verified
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyLCJleHAiOjI5MjYyMzkwMjJ9.X_b1d8Yj_h0l3f_E5m9N8P6TfA4WfUUSh8XoY
Header
Payload
Signature

Token Active

Expires in 13207 days

19% elapsed
Header
{
  "alg": "HS256",
  "typ": "JWT"
}
Payload
{
  "sub": "1234567890",
  "name": "John Doe",
  "iat": 1516239022,
  "exp": 2926239022
}
Recognized claims
subSubject1234567890
nameFull NameJohn Doe
iatIssued At1/18/2018, 1:30:22 AM
expExpiration Time9/23/2062, 12:10:22 PM

Decoding scope

Paste a JSON Web Token to instantly decode its header and payload, and view the raw signature segment. The debugger parses the structure locally but does not cryptographically verify the signature against a secret.

Recognized claims

Common standard claims—such as iss (Issuer), sub (Subject), aud (Audience), and scope—are extracted into a dedicated table. This makes it easier to scan the token’s permissions and origin without reading raw JSON.

Expiration & lifecycle

When a token includes an exp (Expiration) claim, the debugger displays a live lifecycle banner indicating whether the token is active or expired, along with the remaining or elapsed time.

Human-readable dates

By default, JWT timestamps like iat, nbf, and exp are stored as raw Unix seconds. The Human Dates toggle converts these values into readable local timestamps to simplify timezone debugging.

Frequently Asked Questions

This tool decodes a JSON Web Token and shows its header, payload, raw signature segment, recognized standard claims, and token lifecycle details like expiration and issued-at time. It is designed for inspection and debugging, not signature verification.

No. It shows that a signature segment is present, but it does not verify whether the token was signed with the correct secret or public key. It is a decoder and inspector, not a full JWT verifier.

Yes. You can toggle human-readable dates on or off. When enabled, standard JWT timestamp claims are displayed as readable local dates and times instead of raw Unix seconds.

Yes. If the token includes an exp claim, the tool shows whether the token is active or expired, how much time remains or has passed, and a visual lifecycle progress bar.

The tool shows the token’s three encoded sections: header, payload, and signature. It also decodes the header and payload JSON so you can inspect claims, metadata, and token structure more easily.

Yes. The Copy JSON action exports a compact report containing the decoded header, payload, and signature segment so you can paste it into notes, tickets, docs, or debugging workflows.

Explore Our Tools

Browse all tools