Question 1

How do I decode a JWT token?

Accepted Answer

Paste the full JWT token (the long string with two dots separating three parts) into the input field. The tool instantly decodes the header (algorithm, type) and payload (claims, expiration, issuer) without needing any secret key.

Question 2

Is it safe to paste my JWT token here?

Accepted Answer

Yes. The decoding happens entirely in your browser using JavaScript — no data is sent to any server. JWTs are encoded (Base64URL), not encrypted, so decoding doesn't require your secret key.

Question 3

What are the three parts of a JWT?

Accepted Answer

A JWT has three Base64URL-encoded parts separated by dots: the Header (algorithm and token type), the Payload (claims like user ID, expiration, roles), and the Signature (cryptographic proof the token hasn't been tampered with).

Question 4

How do I check if my JWT is expired?

Accepted Answer

Paste your token and look at the exp (expiration) claim in the decoded payload. The tool shows both the raw Unix timestamp and a human-readable date, plus an indicator showing whether the token is currently expired.

فك JWT

أدوات ذات صلة

ترميز Base64

منسّق JSON

مدقق JSON

عارض JSON

الأسئلة الشائعة