MDevTools

JWT DecoderJWT 解码

Decode a JSON Web Token locally, no upload.

在浏览器本地解码 JSON Web Token 的 Header 与 Payload,不发送令牌、不验证签名。

What is JWT Decoder?JWT 解码 是什么?

A JWT decoder splits a JSON Web Token into its three parts — header, payload and signature — and shows the header and payload as readable JSON. It reveals the algorithm, issuer, expiry and custom claims, which makes it the fastest way to debug authentication. Decoding happens entirely locally, so tokens containing real session data never leave your browser.

JWT 解码器把 JSON Web Token 拆成三部分——头部、载荷、签名——并把头部和载荷显示为可读 JSON。它能揭示算法、签发者、过期时间和自定义声明,是调试认证问题最快的方式。解码完全在本地进行,含真实会话数据的令牌不会离开浏览器。

How to use jwt decoder如何使用 JWT 解码

  1. Paste the complete JWT, including the three dot-separated segments.
  2. Read the decoded header (algorithm and token type) and payload (claims).
  3. Check the exp claim to see whether the token has already expired.
  4. Copy any section. The signature is displayed but not verified, because verification needs the secret or public key.
  1. 粘贴完整 JWT,包含三个由点分隔的部分。
  2. 阅读解码出的头部(算法与令牌类型)和载荷(声明)。
  3. 查看 exp 声明判断令牌是否已过期。
  4. 复制任意部分。签名仅展示不验证,因为验证需要密钥或公钥。

Common uses常见用途

FAQ常见问题

Can this tool verify the signature?这个工具能验证签名吗?

No. Verifying a signature requires the secret or public key, and sending a token to a third-party service to verify it would defeat the purpose. This tool only decodes so you can inspect the contents.

不能。验证签名需要密钥或公钥,而把令牌发给第三方服务去验证本身就违背了安全目的。本工具只解码,供你检查内容。

Is it safe to paste a real token here?粘贴真实令牌安全吗?

Yes, in terms of privacy — decoding runs entirely in your browser and nothing is transmitted. Still, treat any token as a secret and avoid pasting them into tools on shared screens.

隐私角度是安全的——解码完全在浏览器内完成,不传输。但仍应把令牌当机密处理,避免在共享屏幕上操作。

Why does the payload show numbers like exp and iat?为什么载荷里有 exp、iat 这类数字?

Those are standard registered claims. exp is the expiry time, iat is the issued-at time, both expressed as Unix timestamps in seconds.

它们是标准注册声明。exp 是过期时间,iat 是签发时间,均以秒为单位的 Unix 时间戳。

My token will not decode — what is wrong?令牌解不开是什么问题?

A JWT must have exactly three segments separated by dots. If the string was truncated or line-wrapped when copied, the decode will fail.

JWT 必须恰好三段、由点分隔。如果复制时被截断或换行,解码就会失败。

Other tools其他工具

🧾

JSON FormatterJSON 格式化

Format, validate and minify JSON — Chinese-safe, runs in your br…

格式化、校验并压缩 JSON,支持中文与错误定位。全程在浏览器本地完成。…

🔤

Base64 Encode / DecodeBase64 编解码

Encode or decode Base64 text with UTF-8 and URL-safe support.…

对文本进行 Base64 编码或解码,支持 UTF-8 中文与 URL 安全字符…

🔗

URL Encode / DecodeURL 编解码

Percent-encode or decode URLs, params and text.…

对网址、参数或文本进行 URL 百分号编码与解码,方便调试接口与链接。…

#️⃣

Hash Generator哈希生成

Generate MD5, SHA-1, SHA-256 or SHA-512 hashes.…

用 MD5、SHA-1、SHA-256 或 SHA-512 为文本生成哈希值,常…

🆔

UUID GeneratorUUID 生成

Generate random UUID v4 identifiers.…

一键生成多个随机 UUID v4,用于主键、追踪 ID 与测试数据。…

🔎

Regex Tester正则测试

Test regular expressions and see matches live.…

实时测试正则表达式,查看匹配数量与命中内容,方便调试抓取与替换规则。…

Sister sites友情链接 MonkeyDev dev tools hub工具总站 FreePDFKit PDF toolsPDF 工具集 ImageToolKit image tools图片工具集 AI 咒语库 AI prompt libraryAI 提示词库 CalcKit finance calculators财务计算器 OfficeKit office utilities办公工具箱 AIkit AI & machine learningAI 与机器学习 DataKit data & spreadsheet tools数据与表格工具 ChartKit diagrams & charts图表与可视化 DocKit markdown & document toolsMarkdown 与文档工具