JWT Debugger & Token Inspector Pro
Decode, inspect, verify, and generate JSON Web Tokens (JWT) in real-time. Claims breakdown, cryptographic HMAC/RSA signature verification, and live expiry countdown.
🔴 Header (alg, typ)
🟣 Payload (Claims)
🔵 Signature Verify
⏳ Exp Countdown
🔐 Encoded Token (Raw)
Paste raw token below
🔴 Header
🟣 Payload
🔵 Signature
🔴 HEADER: Algorithm & Type
{\n "alg": "HS256",\n "typ": "JWT"\n}
🟣 PAYLOAD: Data & Standard Claims
{\n "sub": "user_12345",\n "name": "Mario Rossi",\n "email": "mario@example.com",\n "role": "admin",\n "iat": 1724281200,\n "exp": 1724367600\n}🕒 Timestamp & Expiration Recognition:
| Claim | Significato | Valore Umano / Data |
|---|
🔵 VERIFY SIGNATURE
✓ Firma Verificata
HMACSHA256( base64UrlEncode(header) + "." + base64UrlEncode(payload), secret )
What is a JSON Web Token (JWT) and How Does It Work?
A JSON Web Token (RFC 7519) is a compact, URL-safe means of representing claims securely between two parties.
3-Part Token Architecture
A JWT consists of three Base64URL strings separated by dots: Header, Payload (claims), and Signature.
Standard Registered Claims
Common claims include "sub" (subject), "exp" (expiry timestamp), "iat" (issued at), "nbf" (not before), and "iss" (issuer).