QuackyardJWT Decoder
Decode a JSON Web Token in your browser and read its header, claims and expiry in plain words.
Nothing leaves your browser: the token is decoded here, in the page, and never sent anywhere.
Valid now: it expires in 7 years.
The three parts
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJodHRwczovL2F1dGguZXhhbXBsZS5jb20iLCJzdWIiOiJ1c2VyXzEyMzQ1IiwiYXVkIjoicXVhY2t5YXJkLmNvbSIsImlhdCI6MTczNTY4OTYwMCwiZXhwIjoxOTg3OTc3NjAwLCJyb2xlIjoiYWRtaW4ifQ.dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk
headerpayloadsignature
The algorithm is HS256. Decoding only reads what the token says: nothing here checks the signature, so a token shown on this page can still be forged or altered.
header
{
"alg": "HS256",
"typ": "JWT"
}payload
{
"iss": "https://auth.example.com",
"sub": "user_12345",
"aud": "quackyard.com",
"iat": 1735689600,
"exp": 1987977600,
"role": "admin"
}Claims
| Claim | Means | In this token |
|---|---|---|
| iss | Issuer is who created the token, usually a URL or a domain name | https://auth.example.com |
| sub | Subject is who the token is about, usually a user id | user_12345 |
| aud | Audience is who the token is meant for, the service that should accept it | quackyard.com |
| iat | Issued at is when the token was made | 17356896002025-01-01T00:00:00.000Z |
| exp | Expires is when the token stops being accepted | 19879776002032-12-30T00:00:00.000Z |
More in the yard
- Base64 Encoder & DecoderEncode text to Base64 and decode it back, in the standard or URL-safe alphabet, without your text leaving the page.
- chmod CalculatorConvert Unix permissions between octal and symbolic notation, special bits included.
- Cron BuilderRead and write cron expressions in plain English, with the next run times in any timezone.
- Hash GeneratorHash text with MD5, SHA-1, SHA-256, SHA-384 and SHA-512 at once, and check a hash against it.
- JSON Formatter & ValidatorFormat, minify and check JSON, and see the exact line and column where it breaks.
- JSON ↔ YAML ConverterConvert between JSON and YAML: anchors resolved, multi-document files handled, and output that round-trips.
- Regex TrainerLearn regular expressions one level at a time: match one list, skip the other, in as few characters as you can.
- Unix Timestamp ConverterTurn Unix timestamps into dates and back, in any timezone.
- URL Encoder & DecoderPercent-encode text for URLs, decode it back, and take a URL apart into its pieces.