فك ترميز JWT

Step-by-step instructions (English)

1. Paste the compact JWT into the token field.
2. Decode and inspect the header, payload, and available timestamp claims.
3. Check the issuer, audience, and expiration in your own authentication system before making any security decision.

الصيغة والطريقة

Split the token into header, payload, and signature. Decode the first two sections using Base64URL and parse them as JSON. Numeric iat, exp, and nbf claims are displayed as dates. No secret, key, or signature verification is performed.

مثال عملي

An exp claim of 0 refers to the Unix epoch. Displaying that claim does not prove the token came from a trusted issuer.

When this tool is useful

Inspect a token while debugging authentication or compare the claims emitted by development environments. Decoding helps explain what the token says, but does not establish who created it.

Common mistakes and limitations

• A readable payload and an unexpired exp claim do not prove a token is authentic.
• The tool does not have the issuer key and never verifies the signature; do not use its output as an authorization decision.

Practical questions about this tool (English)