Question 1

What is a JWT?

Accepted Answer

A JSON Web Token (JWT) is a compact, URL-safe means of representing claims between two parties. It consists of three parts: a header, a payload, and a signature, separated by dots.

Question 2

Is it safe to paste my JWT here?

Accepted Answer

Yes. All decoding happens entirely in your browser. No data is transmitted to any server. However, you should still avoid sharing JWTs publicly as they may contain sensitive information.

Question 3

Does this tool verify the signature?

Accepted Answer

No. This tool decodes and displays the JWT contents but does not verify the cryptographic signature. Signature verification requires the secret key or public key used to sign the token.

Question 4

How do I check if my JWT is expired?

Accepted Answer

If the token contains an "exp" (expiration) claim, this tool will automatically check it against the current time and display an "Expired" badge if the token has expired.

JWT Decoder

Frequently Asked Questions