JWT Decoder
Inspect JWT headers, payloads, time claims and expiration status.
Usage, example, and limits
Usage
- Paste a complete three-part JWT.
- Inspect alg and typ in the header and claims such as iss, aud, and exp in the payload.
- When trust matters, verify the signature and claims on a server with trusted keys.
Limits
- JWT content is normally Base64URL-encoded rather than encrypted.
- exp, nbf, and iat commonly use Unix seconds and can be affected by clock skew.
- Never make authorization decisions from client-side decoding alone.
Example
- Input
eyJ... (Header.Payload.Signature)- Output
Decoded header and payload JSON
The token text alone cannot prove that a trusted issuer created the signature.
Data handling
Input and results are processed only in the current browser tab. KitOtter does not upload, store, or analyze them to complete this task.