JWT
JWT Decoder
Decode a JWT's header and payload, check its expiry status and verify its signature.
Header
Payload
Not verified
Algorithm
This token's algorithm is none which means it is unsigned. Issuing or accepting a token like this in production is a known security vulnerability.
This tool runs entirely in your browser; the token is never sent to a server. Signature verification requires a secure connection (HTTPS) or running on localhost.