Decode a basic JWT with readable claims
Input
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.signature
Output
Header and Payload JSON
Useful when you want to inspect standard claims and basic token structure.
Check expiration claim
Input
eyJhbGciOiJIUzI1NiJ9.eyJleHAiOjE3MzU2ODk2MDAsInN1YiI6InVzZXIxIn0.signature
Output
Decoded payload with exp claim
Helpful when debugging expired or soon-to-expire tokens.
Inspect issuer and audience
Input
eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2F1dGguZXhhbXBsZS5jb20iLCJhdWQiOiJhcGktY2xpZW50Iiwic3ViIjoidXNlcjEyMyJ9.signature
Output
Decoded payload with iss, aud, and sub
Useful for checking whether the token was issued for the correct app or API.
Inspect roles or permissions
Input
eyJhbGciOiJIUzI1NiJ9.eyJyb2xlcyI6WyJhZG1pbiIsImVkaXRvciJdLCJwZXJtaXNzaW9ucyI6WyJyZWFkIiwid3JpdGUiXX0.signature
Output
Decoded payload with roles and permissions
Useful for debugging authorization problems and role-based access rules.
Read custom claims
Input
eyJhbGciOiJIUzI1NiJ9.eyJ0ZW5hbnQiOiJhY21lIiwidXNlcl90eXBlIjoicHJvIiwidGllciI6ImdvbGQifQ.signature
Output
Decoded payload with custom claims
Helpful when your app stores tenant, plan, or account information in custom fields.
Inspect a token from an auth flow
Input
eyJhbGciOiJSUzI1NiIsImtpZCI6IjEyMyJ9.eyJzdWIiOiJ1c2VyLTEiLCJlbWFpbCI6InVzZXJAZXhhbXBsZS5jb20iLCJleHAiOjE3MzU2ODk2MDAsImlhdCI6MTczNTYwMzIwMH0.signature
Output
Decoded header and payload with user and timing claims
Useful when checking whether the token content matches the user who just signed in.
Invalid JWT with missing parts
Input
eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjMifQ
Output
Invalid JWT
A JWT normally contains three dot-separated parts: header, payload, and signature.
Invalid JWT with broken Base64 URL data
Input
invalid.token.value
Output
Invalid JWT
The decoder fails when token segments are not valid JWT data.