Token inspection Local

JWT Inspector

Decode token headers and claims, including expiry times. Signatures are not verified.

Processed in your browser. Your input is not uploaded.

Input

Local decoding only. The signature, issuer, audience, and permissions are not verified.

Output

Run the tool to see the result.

Reading the output

The header and claims are untrusted input. A token can be edited or forged and still decode successfully. Time labels use your device clock. An unexpired exp value does not mean a token is valid. Encrypted JWE tokens are not supported. The example is synthetic.