tarsolutionWhat it does
Decode JWT claims and make expiry, issued-at and not-before timestamps easy to read.
Claims, readable dates and signature checks.
01 Input
02 Output
A little clarity awaits.
Start with a sample or add your own input.
Your result will appear here.
Ready when you areJSON API · no cache
A CLOSER LOOKThe details behind
The details behind
the result.
Understand the format, the calculation, and what to look for.
Dates
NumericDate uses seconds since Unix epoch. Values above 100 billion are interpreted as non-standard milliseconds and labelled accordingly.
Trust
A token that has not expired is not necessarily authentic. Signature verification is opt-in and restricted to your selected algorithms.
Inputs explained
- JWT token
- Three-part JWT/JWS. JWE decryption is not supported.
- Local timezone
- Detected from your browser; you can change it. Loading a sample keeps your choice. UTC is the fallback when detection is unavailable.
- Verify signature
- Verify signature
- Verification key
- PEM, JWK or shared secret. Never persisted.
- Allowed algorithms
- Allowed algorithms
- Expected issuer
- Expected issuer
- Expected audience
- Expected audience