JWT解析器
在浏览器中处理或呈现JWT解析。
使用步骤
如何使用
- Paste a compact JWT with three dot-separated segments.
- Parse the header and payload locally with Base64URL decoding.
- Review standard time fields and remember that parsing is not signature verification.
What this JWT parser shows
A compact signed JWT contains a header, payload, and signature segment. This page decodes the first two segments, displays the signature as opaque text, and formats standard NumericDate claims such as iat, nbf, and exp.
Parsing is not verification
Anyone can decode a JWT payload. This tool does not check a key, validate claims, verify a signature, decrypt a token, or decide whether a token is authentic, current, or safe.
Local and ephemeral
Parsing happens entirely in your browser. The token is not uploaded or stored by this tool; avoid pasting live credentials into shared or recorded screens.
常见问题
你可能还想知道
Does this verify the JWT signature?
No. It only decodes the header and payload and displays the signature segment as opaque text. Use trusted application code to verify a token before accepting it.
What do iat, nbf, and exp mean?
They are NumericDate claims: issued at, not before, and expiration time. This tool formats their numeric seconds as UTC dates but does not enforce them.
Does decoding prove the token is safe?
No. Decoding is for inspection only. Check issuer, audience, expiry, signature, and application-specific claims with trusted server-side logic.
Does my token leave the browser?
No. The page performs parsing locally and does not send the token to a server.