Depurador JWT

Decodifica cargas JWT localmente (sin verificar firma)

Firma no verificada

Este decodificador solo lee los claims del payload. No verifica la firma del JWT. Un payload decodificado te dice lo que el token afirma, no si es auténtico — nunca confíes sin verificación de firma del lado del servidor.

JWT Token

Samples

Header

—

Payload

—

Cómo usar

Paste a JWT — the three dot-separated segments (header, payload, signature) are split automatically.
The Base64URL header and payload are decoded into readable JSON.
Registered claims such as exp, iat, and nbf are rendered as human-readable dates next to their raw epoch values.
Decoding happens entirely in your browser; the signature is not verified and the token never leaves your machine.

Ejemplos

Paste a token like eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjMiLCJleHAiOjE3MDAwMDAwMDB9.abc and the payload reveals sub: 123 and exp: 1700000000, shown as a readable UTC date.
If the exp claim is in the past, the tool flags the token as expired so you can spot stale credentials at a glance.

Verifica las salidas antes de usar en producción. Sin garantía — ver Términos.