JSON Web Tokens (JWT) are the industry standard for authentication and information exchange. Our decoder helps you inspect token contents during development and debugging.
JWT Structure
**Header**: Specifies the signing algorithm (HS256, RS256, etc.) and token type.
**Payload**: Contains claims—statements about the user and additional metadata like expiration time.
**Signature**: Verifies the token hasn't been tampered with (not decoded here for security).
Common JWT Claims
- **iss**: Token issuer - **sub**: Subject (usually user ID) - **exp**: Expiration timestamp - **iat**: Issued at timestamp - **aud**: Intended audience