130 of 149 tools live Roadmap LatestImage to Text

JWT Viewer

Paste a token and see its claims, with the dates as dates and the status spelled out.

Works in your browser. The token and any key you paste never leave your device.

Decoded in your browser. The token and any secret you paste never leave your device.

JWT Viewer at a glance

Price
Free
Data sent to us
None, it runs in your browser
Sign-up
Not needed
Reads
Signed JWTs (JWS), three parts
Verifies
HS256/384/512, RS256/384/512, PS256/384/512, ES256/384/512
Does not
Fetch keys or read encrypted tokens

How to use JWT Viewer

Takes about 1 minute. You need a JWT, and its key if you want the signature checked.

  1. Paste the tokenPut the JWT in the box, with or without the Bearer prefix. The header, payload and claims appear at once.
  2. Read the claimsCheck the expiry line, the issuer and the audience. Expired or not-yet-valid tokens are marked in red.
  3. Check the signaturePaste the secret or the PEM public key under Signature. A green line means the token was signed with that key and not changed.
JWT Decoder: See what a JWT says, when it expires and whether its signature holds, without the token leaving your device.

Paste a JWT and see its header and payload laid out, with the registered claims named and the expiry, issue and not-before times shown as dates in UTC and your own time, together with how long is left or how long ago the token expired. The signature can be checked too if you have the key. Everything stays in your browser.

How it works

JWT Viewer is a web page that does its work on your own device. Everything you type or choose is worked out by your browser and never sent to a server, so nothing is stored and there is nothing to delete. There is no account, no sign-up and no limit on how often you use it.

Reading a token from a log

Tokens in logs often carry a Bearer prefix or line breaks; both are ignored. If the payload shows a user id you do not expect, the client is sending the wrong token; if exp is in the past, the refresh flow failed.

Questions

Why are the times shown twice?

Once in UTC, which is what the claim means, and once in your own time zone, which is what you compare against a clock.

Other shortcuts

More

Privacy policy · Support · Changelog

Suggest a tool

Tell us what the tool should do. If we build it, we will let you know.

Used only to reply to you. See our Privacy Policy.