Algorithm / type
—
Header
Payload
Paste a JWT. Decode header and payload here. Optional local HMAC verify.
See what is inside a login token. Check when a token runs out.
Your token stays in this browser. Nothing is uploaded. Refresh and it's gone. We do not see it.