Developer Suite
JWT Token Decoder
Decode JSON Web Tokens (JWT) payload and header instantly. Inspect claims and verify HMAC-SHA signatures locally.
JWT Token Input
Signature Verification
What is a JSON Web Token?
JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object.
This token consists of three parts separated by dots (.): Header, Payload, and Signature. Header specifies the signing algorithm; Payload contains the claims (user data); and Signature verifies that the sender is who they say they are and ensures the message wasn't changed along the way.
Header (Algorithm & Token Type)
Payload (Data / Claims)
Signature
HMACSHA256(
base64UrlEncode(header) + "." +
base64UrlEncode(payload) ,
base64UrlEncode(payload) ,
secretOrPrivateKey
) Related Tools
Explore other diagnostics that might help with your workflow.