본문으로 건너뛰기
JWT

JWT Decoder

Inspect the payload of a JSON Web Token.

브라우저에서 처리 — 데이터가 기기를 떠나지 않습니다

…alg: HS256typ: JWT
{ "alg": "HS256", "typ": "JWT" }
{ "sub": "1234567890", "name": "toco.tools", "admin": false, "iat": 1700000000, "exp": 1900000000 }
iat
2023-11-14T22:13:20Z / 11/15/2023, 7:13:20 AM
exp
2030-03-17T17:46:40Z / 3/18/2030, 2:46:40 AM
Signature

b6eofQ9HFFK2agA2PMVr_YFNJwB0WkVVtGyrvRfzpaw

Decode mode does not verify signatures. Use the Verify tab for HS256 validation.

JWT Decoder 소개

A JSON Web Token (JWT) packs header, payload, and signature as Base64URL segments—common in OAuth and API auth for carrying claims. toco.tools decodes the header and payload JSON locally so you can inspect exp, sub, and custom claims quickly. Signature verification is not performed here. Always validate tokens on your server for authorization decisions. Tokens may contain sensitive claims.

사용 방법

  1. Paste the JWT string
  2. Review header and payload
  3. Copy claims you need

자주 묻는 질문

What is a JWT decoder?

A tool that splits a JWT and shows the header and payload JSON.

Is the token sent externally?

No. Decoding runs entirely in your browser.

Does it verify the signature?

No. It only displays decoded parts; cryptographic verification is not done.