跳转到正文
JWT

JWT Decoder

JWTのペイロードを確認。

在浏览器内运行 — 数据不会离开您的设备

…alg: HS256typ: JWT
{ "alg": "HS256", "typ": "JWT" }
{ "sub": "1234567890", "name": "toco.tools", "admin": false, "iat": 1700000000, "exp": 1900000000 }
iat
2023-11-14T22:13:20Z / 11/15/2023, 7:13:20 AM
exp
2030-03-17T17:46:40Z / 3/18/2030, 2:46:40 AM
Signature

b6eofQ9HFFK2agA2PMVr_YFNJwB0WkVVtGyrvRfzpaw

Decode mode does not verify signatures. Use the Verify tab for HS256 validation.

关于JWT Decoder

A JSON Web Token (JWT) packs header, payload, and signature as Base64URL segments—common in OAuth and API auth for carrying claims. toco.tools decodes the header and payload JSON locally so you can inspect exp, sub, and custom claims quickly. Signature verification is not performed here. Always validate tokens on your server for authorization decisions. Tokens may contain sensitive claims.

使用方法

  1. Paste the JWT string
  2. Review header and payload
  3. Copy claims you need

常见问题

What is a JWT decoder?

A tool that splits a JWT and shows the header and payload JSON.

Is the token sent externally?

No. Decoding runs entirely in your browser.

Does it verify the signature?

No. It only displays decoded parts; cryptographic verification is not done.