Guide

What is a JWT?

A JWT, or JSON Web Token, is a compact token format often used for authentication and authorization between systems.

JWT Parts

A JWT usually has three dot-separated parts: header, payload, and signature. The payload contains claims such as user id, role, issuer, audience, issued-at time, and expiration time.

Can JWT Payloads Be Read?

Yes. Most JWT payloads are Base64URL encoded, not encrypted. Sensitive secrets should not be placed in a readable token payload.

Example Shape

header.payload.signature

Try It

Open the JWT Decoder to inspect token header and payload locally.