MU
MUHAMMAD USMANSOFTWARE ENGINEER • FLUTTER & AI
BACK TO TOOLS HUB
100% PRIVATE // CLIENT-SIDEsecurity
SECURITY TOOL // ZERO DATA LEAKAGE

JWT Token & Claims Inspector

Decode, inspect, and analyze JSON Web Tokens completely inside your browser. Inspect algorithm headers, payload claims, and real-time expiration countdowns with zero backend storage.

LOAD TEST TOKENS:
ENCODED TOKEN
PASTE RAW JWT
ENCODED STRUCTURE BREAKDOWN:
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI2YWE2MDFlYy02MWYzLTQ4ZDAtYjFkYS1mZDU3NDI1YTlmYjQiLCJhdWQiOiJhdXRoZW50aWNhdGVkIiwiZW1haWwiOiJkZXZlbG9wZXJAZXhhbXBsZS5jb20iLCJhcHBfbWV0YWRhdGEiOnsicHJvdmlkZXIiOiJlbWFpbCIsInJvbGVzIjpbImFkbWluIiwiZGV2Il19LCJ1c2VyX21ldGFkYXRhIjp7ImZ1bGxfbmFtZSI6Ik11aGFtbWFkIFVzbWFuIn0sImlhdCI6MTcxOTAwMDAwMCwiZXhwIjoyMDg0NjQwMDAwfQ.dM693oFfL3Wvh0eXQ3_s3dG0m1HqgD0b3v54mN0rKso
ACTIVE & VALID
LIVE TICKER

3432d 21h 15m 18s remaining

EXPIRES AT:1/22/2036, 6:40:00 PM
ISSUED AT:6/21/2024, 8:00:00 PM
HMAC-SHA256 SIGNATURE TEST
WEB CRYPTO API
DECODED HEADER: ALGORITHM & TYPE(jwt-header.json)
1{
2 "alg": "HS256",
3 "typ": "JWT"
4}
DECODED PAYLOAD: DATA & CLAIMS(jwt-payload.json)
1{
2 "sub": "6aa601ec-61f3-48d0-b1da-fd57425a9fb4",
3 "aud": "authenticated",
4 "email": "developer@example.com",
5 "app_metadata": {
6 "provider": "email",
7 "roles": [
8 "admin",
9 "dev"
10 ]
11 },
12 "user_metadata": {
13 "full_name": "Muhammad Usman"
14 },
15 "iat": 1719000000,
16 "exp": 2084640000
17}
CLAIMS INTERPRETER & AUDIT
STANDARD SPECS (RFC 7519)
CLAIMRAW VALUEINTERPRETATION
sub6aa601ec-61f3-48d0-b1da-fd57425a9fb4Subject: Identifies the principal that is the subject of the JWT (user ID)
audauthenticatedAudience: Identifies the recipients that the JWT is intended for
emaildeveloper@example.comUser Email address
app_metadata{"provider":"email","roles":["admin","dev"]}{"provider":"email","roles":["admin","dev"]}
user_metadata{"full_name":"Muhammad Usman"}{"full_name":"Muhammad Usman"}
iat17190000006/21/2024, 8:00:00 PM
exp20846400001/22/2036, 6:40:00 PM