Click on any cookie below to inspect it. Only cookies that look like JWTs (contain two dots) are shown.
Token Validity Status
Header
Payload Claims
Signature
Raw Token Parts
Header (Base64URL)
Payload (Base64URL)
Signature (Base64URL)
About JWT Tokens
JSON Web Tokens (JWT) are a compact, URL-safe means of representing claims to be transferred between two parties.
A JWT consists of three parts separated by dots (.):
header.payload.signature
Common Claims
iss (Issuer)
Identifies who issued the token
sub (Subject)
Identifies the subject of the token (usually user ID)
aud (Audience)
Identifies the recipients that the JWT is intended for
exp (Expiration Time)
Timestamp after which the JWT must not be accepted
nbf (Not Before)
Timestamp before which the JWT must not be accepted
iat (Issued At)
Timestamp when the JWT was issued
jti (JWT ID)
Unique identifier for the JWT
Note: This tool decodes JWTs but does not verify signatures. Signature verification requires the secret key or public key, which should never be exposed in a client-side application.