Beta
JWT Inspector
Paste a JWT to see its header and payload, with readable timestamps and an expiry check. Decoding happens on your device. The token is never sent anywhere.
- Category
- Developer utilities
- Hosting
- Runs on this site
- Version
- 0.1.0
- Built with
- ReactTypeScriptWeb APIs
Features
- Header and payload as formatted JSON
- Turns exp, iat and nbf into dates, with time remaining
- Points out malformed tokens and which part failed
- Runs entirely in the page: nothing leaves your device
How to use it
- Open the app and paste a token, or try the sample.
- Read the decoded header and payload.
- Check the status line to see whether the token has expired.
Known limitations
- Doesn't verify signatures, because that needs the secret or public key.
- Only reads signed tokens (three dot-separated parts), not encrypted ones.