Débogueur JWT

Décode les payloads JWT localement (signature non vérifiée)

Signature non vérifiée

Ce décodeur lit uniquement les claims du payload. Il ne vérifie pas la signature JWT. Un payload décodé indique ce que le token prétend, pas s'il est authentique — ne faites jamais confiance sans vérification de signature côté serveur.

JWT Token

Samples

Header

—

Payload

—

Comment utiliser

Paste a JWT — the three dot-separated segments (header, payload, signature) are split automatically.
The Base64URL header and payload are decoded into readable JSON.
Registered claims such as exp, iat, and nbf are rendered as human-readable dates next to their raw epoch values.
Decoding happens entirely in your browser; the signature is not verified and the token never leaves your machine.

Exemples

Paste a token like eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjMiLCJleHAiOjE3MDAwMDAwMDB9.abc and the payload reveals sub: 123 and exp: 1700000000, shown as a readable UTC date.
If the exp claim is in the past, the tool flags the token as expired so you can spot stale credentials at a glance.

Vérifiez les sorties avant utilisation en production. Aucune garantie — voir Conditions.