JWT Decoder
Paste a JSON Web Token (with or without "Bearer") to see its header and payload, the issued, not-before and expiry times as dates, and, for HS256, HS384 and HS512 tokens, whether the signature matches a secret.
Decode a JWT
A JWT is three Base64url parts separated by dots: header, payload and signature. The decoder reads the first two as JSON and formats them; nothing about the token is sent anywhere.
Header, payload and signature explained
The header names the signing algorithm (alg) and type. The payload holds the claims: who the token is about (sub), who issued it (iss), who it is for (aud), and when it was issued and expires. The signature proves the first two parts were not changed, if you hold the key.
Check token expiry (exp claim)
exp, iat and nbf are Unix timestamps; the decoder shows them as dates and says whether the token has expired or is not valid yet, and how many minutes it has left.
Is it safe to paste a token?
On this page, yes: decoding and signature checks happen in your browser, so the token never leaves your computer. Be careful with sites that decode on a server, because a live token is a key to the account it belongs to.
Text to Result converter: free and online
Convert text to result in your browser: drop in a Text file and download the Result. The file is converted on your own device and never uploaded, so this text to result converter is safe for private and confidential files.
More conversions from Text: Text to PDF, Text to PDF, Text to PDF, Text to PDF, Text to PDF, Text to PDF.
Other conversions to Result: Text to Result, Text to Result, Text to Result, Text to Result, Text to Result, Text to Result.
People also search for
- text to result free
- text to result without losing quality
On the blog: JWT Decoder: Steps, Tips and Mistakes to Avoid
Reviews
No reviews yet. Used this tool? Yours could be the first.
Used this tool? Sign in to write a review.
Something not right with this tool? Raise a support ticket and a person will look into it.
Questions
How do I convert Text to Result?
Drop your Text file on this page, check the preview, and press Download. The Result is made in a few seconds, with no sign-up.
Is my Text file uploaded anywhere?
No. The text to result conversion runs in your browser, on your own device. The file never leaves it.
Does decoding verify the token?
No. Anyone can decode a JWT; only checking the signature with the key proves it is genuine. For HS256, HS384 and HS512 tokens, type the shared secret to check it here.
Can it check RS256 tokens?
Not yet: those are signed with a private key and checked with a public key, which this page does not take.
What is a JWE?
An encrypted token with five parts. Its payload cannot be read without the decryption key.